Visual display of risk-identifying metadata for identity management access requests

摘要

An identity management system is augmented to enable a manager to associate “risk” metadata with different types of access requests representing computer system accounts that can be requested by authorized users. When an authorized user then requests access to a particular account, any “risk” associated with that access is shown to the user, typically in the form of a visual “badge” or other such indicator. The badge includes an appropriate informational display (e.g., “High Risk” or “Regulated”) that provides an appropriate risk warning. The risk metadata badge information preferably also is displayed for risk-based access request approval routing; in such context, the risk metadata may also determine the risk approval workflow itself. Thus, for example, if the risk metadata is present when the authorized user requests access, an approval workflow may be modified so that the request approval is routed appropriately.

主权项

1. A method of identifying a risk associated with access to one or more computer system accounts, comprising:
for at least one access request type, receiving data that associates risk metadata with a type of visual indicator; displaying a user interface that includes request access options to access the one or more computer system accounts; and displaying a graphic element in association with at least one of the request access options in the user interface, the graphic element being defined by the risk metadata and the type of visual indicator to identify the risk associated with access to the computer system account; wherein the receiving and displaying operations are carried out in software executing in a hardware element.