ORGANIZATION-BASED POLICIES

摘要

Techniques for representating, managing and storing data related to an organization are provided. An identity management system is disclosed that is configured to manage, represent and store data related to an organization. The identity management system reads data pertaining to an organization from a directory and generates a data model of the organization. The identity management system performs operations to manage the data related to an organization using the data model. The operations include adding logical organizations to the data model and defining user-membership policies associated with entities and logical organizations in the data model. The operations may further include identifying policies to be applied to the users of the organization. In some embodiments, the operations include re-assigning a logical organization and its associated user membership policies to different entities within in the data model while maintaining user-membership policies associated with the logical organization.

主权项

1. A computer-implemented method comprising:
detecting, by a computer system, a first event relative to a first user; determining, by the computer system, that the first user belongs to a first organization that is represented by a first leaf node in a hierarchical tree of nodes, based at least in part on the first event; determining, by the computer system, that a first policy is associated with a parent node of the first leaf node; determining, by the computer system, that a second policy is associated with the first leaf node; in response to determining that the second policy is associated with the first leaf node, selecting, by the computer system, the second policy instead of the first policy for application to the first user; and applying, by the computer system, the selected policy to the first user.