Reconciling Access Rights at IAM System Implementing IAM Data Model

摘要

Systems and methods for reconciling access rights provisioned for physical computing resources of a computer system are provided. A reconciler may identify current physical computing resources accessible to a user account of the computer system and a physical entitlement specification associated with the user account. The reconciler may determine whether adjustment of access rights is needed based on a comparison of the current physical computing resources to the physical entitlement specification. Access rights to at least one physical computing resource may be adjusted in response to a determination that adjustment of access rights is needed.

主权项

1. A computer-implemented method for reconciling access rights provisioned for physical computing resources of a computer system comprising:
identify, at a reconciler, a set of current physical computing resources accessible to a user account of the computer system; identify, at the reconciler, a physical entitlement specification associated with the user account; determining, by the reconciler, whether adjustment of access rights is needed based on a comparison of individual current physical computing resources to the physical entitlement specification; and adjusting access rights to at least one of the physical computing resources of the computer system responsive to a determination that adjustment of access rights is needed.