公开(公告)号：US09762585B2

公开(公告)日：2017-09-12

申请号：US14663082

申请日：2015-03-19

申请人： Microsoft Technology Licensing, LLC.

发明人： Rajalakshmi Dani ,  Anand Madhava Menon ,  Paul H. Rich ,  Naveen Madan ,  Vikas Ahuja ,  Siddhartha Mathur ,  Liqiang Zhu

IPC分类号： G06F21/62 ,  H04L29/06 ,  G06F21/60

CPC分类号： H04L63/104 ,  G06F21/604 ,  G06F21/6218 ,  H04L63/08 ,  H04L63/101 ,  H04L63/102 ,  H04L63/20

摘要： Tenant approval for operator access to tenant data is provided. In order to grant service personnel operators access to a tenant's data for performing a requested action, a lockbox determines a security group role to which an operator needs to be elevated to perform a requested action, computes a set of internal administrators and tenant administrators authorized to grant a temporary role elevation, and sends an access control request to the administrators. Upon receiving approval of the access control request from an internal administrator and a tenant administrator, the lockbox elevates the operator to the security group role, granting the operator a set of permissions needed in order to allow the operator to perform the requested action. Accordingly, tenants are enabled to control access to their data and scrutinize access requests per their company procedures and compliance needs.

公开(公告)号：US11075917B2

公开(公告)日：2021-07-27

申请号：US15637242

申请日：2017-06-29

申请人： Microsoft Technology Licensing, LLC

发明人： Rajalakshmi Dani ,  Anand Madhava Menon ,  Paul H. Rich ,  Naveen Madan ,  Vikas Ahuja ,  Siddhartha Mathur ,  Liqiang Zhu

IPC分类号： H04L29/06 ,  G06F21/60 ,  G06F21/62

摘要： Tenant approval for operator access to tenant data is provided. In order to grant service personnel operators access to a tenant's data for performing a requested action, a lockbox determines a security group role to which an operator needs to be elevated to perform a requested action, computes a set of internal administrators and tenant administrators authorized to grant a temporary role elevation, and sends an access control request to the administrators. Upon receiving approval of the access control request from an internal administrator and a tenant administrator, the lockbox elevates the operator to the security group role, granting the operator a set of permissions needed in order to allow the operator to perform the requested action. Accordingly, tenants are enabled to control access to their data and scrutinize access requests per their company procedures and compliance needs.

公开(公告)号：US20160277411A1

公开(公告)日：2016-09-22

申请号：US14663082

申请日：2015-03-19

申请人： Microsoft Technology Licensing, LLC.

发明人： Rajalakshmi Dani ,  Anand Madhava Menon ,  Paul H. Rich ,  Naveen Madan ,  Vikas Ahuja ,  Siddhartha Mathur ,  Liqiang Zhu

IPC分类号： H04L29/06

CPC分类号： H04L63/104 ,  G06F21/604 ,  G06F21/6218 ,  H04L63/08 ,  H04L63/101 ,  H04L63/102 ,  H04L63/20

摘要： Tenant approval for operator access to tenant data is provided. In order to grant service personnel operators access to a tenant's data for performing a requested action, a lockbox determines a security group role to which an operator needs to be elevated to perform a requested action, computes a set of internal administrators and tenant administrators authorized to grant a temporary role elevation, and sends an access control request to the administrators. Upon receiving approval of the access control request from an internal administrator and a tenant administrator, the lockbox elevates the operator to the security group role, granting the operator a set of permissions needed in order to allow the operator to perform the requested action. Accordingly, tenants are enabled to control access to their data and scrutinize access requests per their company procedures and compliance needs.

摘要翻译： 提供了租户对租户数据访问权限的批准。 为了授权维修人员操作人员访问租户的数据以执行所请求的操作，锁箱确定操作员需要提升以执行请求的操作的安全组角色，计算一组内部管理员和授权的租户管理员 授予临时角色提升，并向管理员发送访问控制请求。 在收到来自内部管理员和租户管理员的访问控制请求的批准后，该锁箱将操作员提升到安全组角色，授予操作者所需的一组权限，以允许操作者执行所请求的动作。 因此，租户可以控制对其数据的访问，并根据其公司流程和合规性需求仔细检查访问请求。