Creation of security roles through user walkthrough of business process workflow

摘要

A user interface is displayed to an administrator (or other user) and allows the administrator to walk through a workflow performed by a user in a given role. Data access steps performed in walking through the workflow are recorded and a set of permissions is identified, based upon the recorded workflow. The set of permissions corresponds to the role.

主权项

1. A computer-implemented method of providing role-based access to information, comprising:
accessing predefined workflow information from a data store; automatically identifying a workflow, based on the predefined workflow information, the workflow defining an ordered set of tasks for completing a process; displaying a workflow user interface display with workflow user input mechanisms in accordance with the ordered set of tasks defined by the workflow; receiving workflow user inputs, through the workflow user input mechanisms, indicative of a user performing the set of tasks in an information system to perform the workflow corresponding to a given role; automatically identifying a set of privileges needed by the user in the given role to perform the set of tasks in the workflow in the information system, wherein automatically identifying the set of privileges comprises accessing a set of predefined privilege rules that map workflow user inputs to privileges to identify the set of privileges needed to perform the set of tasks in the workflow; and displaying the set of privileges as corresponding to the given role.