Abstract: A plurality of permissions associated with the on-demand computing services environment may be identified. Each of the permissions may identify a respective one or more actions permitted to be performed within the on-demand computing services environment. Each of the permissions may be granted to a respective one or more user accounts within the on-demand computing services environment. A degree of overlap between a first group of the user accounts granted a first one of the permissions and a second group of the user accounts granted a second one of the permissions may be determined. When the degree of overlap exceeds a designated threshold, a designated permission set that includes the first permission and the second permission may be created.

Abstract: A plurality of permissions associated with the on-demand computing services environment may be identified. Each of the permissions may identify a respective one or more actions permitted to be performed within the on-demand computing services environment. Each of the permissions may be granted to a respective one or more user accounts within the on-demand computing services environment. A degree of overlap between a first group of the user accounts granted a first one of the permissions and a second group of the user accounts granted a second one of the permissions may be determined. When the degree of overlap exceeds a designated threshold, a designated permission set that includes the first permission and the second permission may be created.

Abstract: A plurality of permissions associated with the on-demand computing services environment may be identified. Each of the permissions may identify a respective one or more actions permitted to be performed within the on-demand computing services environment. Each of the permissions may be granted to a respective one or more user accounts within the on-demand computing services environment. A degree of overlap between a first group of the user accounts granted a first one of the permissions and a second group of the user accounts granted a second one of the permissions may be determined. When the degree of overlap exceeds a designated threshold, a designated permission set that includes the first permission and the second permission may be created.

Abstract: Implementations of the invention generate a JavaScript Object Notation (JSON) schema for an application programming interface (API) endpoint that is not documented in a machine understandable schema. In one implementation, a plurality of JSON payloads that were successfully requested using a same endpoint are automatically obtained, and a composite payload is automatically created based on the plurality of JSON payloads that were obtained. Then a JSON schema that documents the API endpoint is automatically generated based on the composite payload. The generating comprises for each field of the composite payload, determining whether the field is optional or mandatory based on a number of the data items that are in the composite payload for the field, and determining a data type of the field based on the data items in the composite payload for the field.

Abstract: Implementations of the invention generate a JavaScript Object Notation (JSON) schema for an application programming interface (API) endpoint that is not documented in a machine understandable schema. In one implementation, a plurality of JSON payloads that were successfully requested using a same endpoint are automatically obtained, and a composite payload is automatically created based on the plurality of JSON payloads that were obtained. Then a JSON schema that documents the API endpoint is automatically generated based on the composite payload. The generating comprises for each field of the composite payload, determining whether the field is optional or mandatory based on a number of the data items that are in the composite payload for the field, and determining a data type of the field based on the data items in the composite payload for the field.