American Express Company
Systems and methods for privileged access management

Abstract:

A master database server may store policy tables which are replicated to SQL databases on a periodic schedule. A master server may receive a privileged command request from a user. The master server may query the SQL database to determine whether the user is authorized to execute the command request. The master server may determine whether the user is a member of a privileged request command ("PRC") group, whether the PRC group has access to the master server, and whether the PRC group has permission to execute the command request.