Advanced Features for Enterprise-Wide Role-Based Access Control

12 years 6 months ago
Advanced Features for Enterprise-Wide Role-Based Access Control
The administration of users and access rights in large enterprises is a complex and challenging task. Roles are a powerful concept for simplifying access control, but their implementation is normally restricted to single systems and applications. In this article we define Enterprise Roles capable of spanning all IT systems in an organisation. We show how the Enterprise Role-Based Access Control (ERBAC) model exploits the RBAC model outlined in the NIST standard draft[5] and describe its extensions. We have implemented ERBAC as a basic concept of SAM Jupiter, a commercial security administration tool. Based on practical experience with the deployment of Enterprise Roles during SAM implementation projects in large organisations, we have enhanced the ERBAC model by including different ways of parametrising the roles. We show that using parameters can significantly reduce the number of roles needed in an enterprise and simplify the role structure, thereby reducing the administration eff...
Axel Kern
Added 14 Jul 2010
Updated 14 Jul 2010
Type Conference
Year 2002
Authors Axel Kern
Comments (0)