ATTRIBUTE-BASED ALLOCATION OF RESOURCES TO SECURITY DOMAINS

摘要

The invention relates to a method for the optimized assignmentof access rights to IT resources managed by means of asecurity management system and to a correspondingly adaptedsecurity management system. According to the invention asecurity domain is defined on the basis of at least oneattribute of IT resources and a plurality of authorizationprofiles is provided for the security domain. User groups areassigned to the domain and linked to profiles provided for thedomain. IT resources for which the security management isresponsible are allocated to the domain in accordance with theattribute defining the security domain, as a result of whichuser groups assigned to the domain receive access rights tothe IT resources allocated to the domain in accordance withthe profiles linked to them. The invention permits the usergroups to be issued with authorizations that are tailored tothe requirements of the individual groups.