Abstract: An access graph is constructed based on access policy data from user accounts, data lake buckets, and/or access policy statements from any other location. Access logs are analyzed to determine actual access to the data tables. For a given user role, an initial set of data tables that are actually accessed is generated forming the baseline of data tables for which access privileges are to be maintained. User roles that are similar to the given user role are identified and additional data tables accessed by the similar user roles are added to the initial set of data tables to generate a final set of data tables. Access privileges to the final set of data tables are maintained for the given user role, while access privileges to the remaining data tables may be revoked.

Abstract: Systems and methods for identifying one or more master tables of a datalake are described. A system may obtain a plurality of computer readable tables of a datalake (with each computer readable table including one or more features). The system may also group the plurality of computer readable tables into a plurality of groups based on a number of features of each computer readable table of the plurality of computer readable tables. The system may further generate, for each of one or more groups of the plurality of groups, one or more neighborhoods based on a similarity of features between computer readable tables of the group. The system may also identify, for each neighborhood, one or more master tables from the one or more computer readable tables of the group. The system may further provide an indication of one or more master tables identified in the datalake.