Dynamically managing entitlements by grouping entities into communities

摘要

Embodiments of the invention are directed to systems, methods, and computer program products configured to determine communities within an organization dynamically based on the distribution of entitlements within the organization. The procedure for determining entitlement eligible entities into communities may include a review of the one or more entitlements that each entitlement-eligible entity has in common with the other of the plurality of entitlement-eligible entities currently associated with each entity and may include computing a correlation matrix. The system is configured to examine the members of a particular community in an organisation and identify members in the community that have access to software applications, datasets or other organisational resources that are uncommon or taboo in the community, which may indicate that the member should not have access to the such resources. Thresholds may be used to determine whether entitlements are normal and/or taboo. In another embodiment the system may be configured to identify a portion of the plurality of entities based on a review of the one or more entitlements that each entity of the plurality of entities has in common with a pseudo-entity.