Access control for event data stored in cloud-based data stores

摘要

Embodiments are directed towards a system and method for a cloud-based front end that may abstract and enable access to the underlying cloud-hosted elements and objects that may be part of a multi-tenant application, such as a search application. Search objects may be employed to access indexed objects. An amount of indexed data accessible to a user may be based on an index storage limit selected by the user, such that data that exceeds the index storage limit may continue to be indexed. Also, one or more projects can be elastically scaled for a user to provide resources that may meet the specific needs of each project.

主权项

1. A method, comprising:
receiving, by a cloud-based access control server, a request from a first user to access a set of time stamped, searchable events, the set of time stamped, searchable events among a plurality of sets of time stamped, searchable events stored in a plurality of cloud-based data stores, each of the time stamped, searchable events is parsed from raw data collected from one or more data sources, the raw data relate to performance or security aspects of one or more information technology systems; determining, by the cloud-based access control server, a role of the first user for the set of time stamped, searchable events; determining, by the cloud-based access control server, whether the first user has permission to access the set of time stamped, searchable events based on the role determined for the first user; allowing, by the cloud-based access control server, the first user to access the set of time stamped, searchable events to perform operations on the set of time stamped, searchable events when the role indicates that the first user has permission to access the set of time stamped, searchable events; wherein the method is performed by one or more computing devices.