Abstract: A system for verifying a user's request to access a resource determines a set of entitlement attributes from the request. The set of entitlement requests indicates a type of permission to access a particular resource, including at least one of a write-access and a read-access to the particular resource. The system determines whether there is any rule that is violated by the set of entitlement attributes. In response to determining that there is at least one rule that is violated by the set of entitlement attributes, the system denies the request.

Abstract: Systems, methods, and computer program products are provided for automatically assigning resource permission levels. The method includes assigning a user to a user group based on one or more job characteristics. The user group includes one or more users associated with a common job type. The method also includes determining a resource permission level for one or more resources based on the user group of the user. Each of the users in a user group receive the same resource permission level for at least one of the one or more resources. The method further includes allowing the user access to one or more resources on a user device associated with the user.

Abstract: A system for verifying a user's request to access a resource determines a set of entitlement attributes from the request. The set of entitlement requests indicates a type of permission to access a particular resource, including at least one of a write-access and a read-access to the particular resource. The system determines whether there is any rule that is violated by the set of entitlement attributes. In response to determining that there is at least one rule that is violated by the set of entitlement attributes, the system denies the request.

Abstract: Artificial intelligence (“AI”) systems and methods are provided for bundling software permissions across an enterprise organization. An AI engine may be deployed to maximize wellness of a software bundle. Maximizing the wellness may include adding a software permission to the bundle. Maximizing the wellness may include associating additional members with the bundle. Maximizing the wellness may include removing a software permission from the bundle. Maximizing the wellness may include disassociating a member from the bundle. The AI engine may streamline allocation of software permissions in an enterprise organization that would otherwise be unmanageable by human role engineers. For example, the AI engine may be deployed in enterprise organizations that utilize over 4,000 different software application across over 750,000 members. Utilizing the AI engine to streamline software permissions may limit exposure of the organization to an increased risk of a cyberattack on its information systems.

Abstract: An apparatus includes a memory and a hardware processor. The memory stores a first profile and a first hash. The processor receives a first message indicating that the user has entered a building and updates the first profile to produce a second profile. The processor generates a second hash, calculates a first deviation between the second hash and the first hash, and determines that the first deviation is below a threshold. The processor receives a second message indicating that the user has requested access to a software application and updates the second profile to produce a third profile. The processor also generates a third hash, calculates a second deviation between the third hash and the first hash, determines that the second deviation is above the threshold, and in response, flags the user for increased security monitoring and denies the user access to the software application.

Abstract: An apparatus includes a memory and a hardware processor. The memory stores a first profile and a first hash. The processor receives a first message indicating that the user has entered a building and updates the first profile to produce a second profile. The processor generates a second hash, calculates a first deviation between the second hash and the first hash, and determines that the first deviation is below a threshold. The processor receives a second message indicating that the user has requested access to a software application and updates the second profile to produce a third profile. The processor also generates a third hash, calculates a second deviation between the third hash and the first hash, determines that the second deviation is above the threshold, and in response, flags the user for increased security monitoring and denies the user access to the software application.