Process management of access rights distribution on the basis of the business-processes analysis

In this article we explore the main aspects of constructing the system that grants access rights to users and manages their changes based on the analysis of business-processes of a company. The management of the companies and the business-processes are one of the most widespread ways to improve activity (reduction of expenses, improvement of service quality, etc.). However many modern organizations describe and optimize business-processes separately from their automatization and protection. Therefore scripts of the information system frequently mismatch businessprocesses and even can conflict with them. The system of access differentiation creates handicaps in the work of users. One of the first problems solved when the system of access differentiation is created is the dividing the corporate information into categories and the definition of access rights to it for various employees of the company. It is obvious that the information system should be worked out considering requirements of dividing corporate information and definition of access rights that follow from analysis of company's business-processes. In the article there is an example of the description of the business-processes in the eEPC-notation and the construction of the access management model based on the analysis of them.