公开(公告)号：US20240348620A1

公开(公告)日：2024-10-17

申请号：US18656336

申请日：2024-05-06

Applicant: Salesforce, Inc.

Inventor： Freeman Parks ,  Ryan D. Woebkenberg

IPC: H04L9/40 ,  G06F18/24 ,  G06N7/01 ,  G06N20/00

CPC classification number: H04L63/104 ,  G06F18/24 ,  G06N7/01 ,  G06N20/00 ,  H04L63/101 ,  H04L63/102

Abstract: A plurality of permissions associated with the on-demand computing services environment may be identified. Each of the permissions may identify a respective one or more actions permitted to be performed within the on-demand computing services environment. Each of the permissions may be granted to a respective one or more user accounts within the on-demand computing services environment. A degree of overlap between a first group of the user accounts granted a first one of the permissions and a second group of the user accounts granted a second one of the permissions may be determined. When the degree of overlap exceeds a designated threshold, a designated permission set that includes the first permission and the second permission may be created.

公开(公告)号：US12010120B2

公开(公告)日：2024-06-11

申请号：US17812977

申请日：2022-07-15

Applicant: Salesforce, Inc.

Inventor： Freeman Parks ,  Ryan D. Woebkenberg

IPC: H04L9/40 ,  G06F18/24 ,  G06N7/01 ,  G06N20/00

CPC classification number: H04L63/104 ,  G06F18/24 ,  G06N7/01 ,  G06N20/00 ,  H04L63/101 ,  H04L63/102

Abstract: A plurality of permissions associated with the on-demand computing services environment may be identified. Each of the permissions may identify a respective one or more actions permitted to be performed within the on-demand computing services environment. Each of the permissions may be granted to a respective one or more user accounts within the on-demand computing services environment. A degree of overlap between a first group of the user accounts granted a first one of the permissions and a second group of the user accounts granted a second one of the permissions may be determined. When the degree of overlap exceeds a designated threshold, a designated permission set that includes the first permission and the second permission may be created.