Abstract: In one aspect of the present disclosure, activities of users within an IT service end user are recorded. A given record of a user activity may include an output of a command executed by the user, and execution information, input parameter(s) to the command, output of the command, and/or any other type of execution information. In implementations, intelligence may be built into a proxy module corresponding to the command to track an execution of the command started by the user. The execution of the command is captured and stored in a buffer such that another user within the IT service end user can review the execution of the command. In another aspect, user interfaces are provided to facilitate a user within an IT service end user to review activities in administering IT services by another user within the IT service end user.

Abstract: In one aspect, just-in-time authentication is provided to assist an administrator or staff of an IT service end user to invoke a function call to a service. The just-time-authentication can provide on-the-fly authentication to the service. In another aspect, granular permissions in executing a task or tasks for a service is enabled for a given administrator or staff of an IT service end user. In some embodiments, the granular permission involves assigning permissions to users either directly or indirectly via a mediating abstraction (such as groups, roles, etc.). Still in another aspect, stateful execution of a command/function call to a service is provided. In the stateful execution, the command/function call to the service is associated with a key, which can comprise a session id, a function name, a count of function executions for current session, and hash of input parameters for the command/function call, and/or any other information.

Abstract: An information retrieval method for cloud service administration is provided. The method may include establishing a connection with a semantic database. In some embodiments, the semantic database is configured to store information for different cloud services, and the information includes information regarding a first cloud service and information regarding a second cloud service. In some embodiments, the information regarding the first cloud service includes a first entity information and the information regarding the second cloud service includes a second entity information. The method further includes transmitting to the semantic database a request to obtain information regarding an asset. Then the method may include receiving from the semantic database an indication that first entity information and the second entity information being linked and being both related to the asset.

Abstract: In one aspect, just-in-time authentication is provided to assist an administrator or staff of an IT service end user to invoke a function call to a service. The just-time-authentication can provide on-the-fly authentication to the service. In another aspect, granular permissions in executing a task or tasks for a service is enabled for a given administrator or staff of an IT service end user. In some embodiments, the granular permission involves assigning permissions to users either directly or indirectly via a mediating abstraction (such as groups, roles, etc.). Still in another aspect, stateful execution of a command/function call to a service is provided. In the stateful execution, the command/function call to the service is associated with a key, which can comprise a session id, a function name, a count of function executions for current session, and hash of input parameters for the command/function call, and/or any other information.

Abstract: In one aspect of the present disclosure, activities of users within an IT service end user are recorded. A given record of a user activity may include an output of a command executed by the user, and execution information, input parameter(s) to the command, output of the command, and/or any other type of execution information. In implementations, intelligence may be built into a proxy module corresponding to the command to track an execution of the command started by the user. The execution of the command is captured and stored in a buffer such that another user within the IT service end user can review the execution of the command. In another aspect, user interfaces are provided to facilitate a user within an IT service end user to review activities in administering IT services by another user within the IT service end user.