OA19299A - Method for managing instant messaging account in management system. - Google Patents

Abstract

A method for managing an instant messaging account in a management system is disclosed in the present invention, including: creating a system role, wherein the role is an independent individual; relating a role-nature instant messaging account to the role according to work content of the role in the management system, wherein during the same period, one role-nature instant messaging account can only be related to one role, and one role can only be related to one role-nature instant messaging account; and creating a relation between a user and a role, and using the rolenature instant messaging accounts related to all roles related to the user as role-nature instant messaging accounts for the user and/or an employee corresponding to the user. According to the present invention, the employee obtains the role-nature instant messaging account through the role related to the corresponding user. When the employee resigns, the user corresponding to the employee is released from the relation to the role. In this way, the resigned employee automatically loses permissions, thus avoiding the risk of leaking confidential information of the enterprise. When the employee is transferred to a new post, seamless handover can be achieved, and the handover of the messaging accounts will not be delayed or omitted.

Description

[0001] The présent invention relates to a method for managing an instant messaging account in a management system such as an ERP or a CRM.

Related Art

[0002] Role-based access control (RBAC) is one of the most researched and mature permission management mechanisms for databases in recent years. It is considered to be an idéal candidate to replace conventional mandatory access control (MAC) and discretionary access control (DAC). Conventional discretionary access control has high flexibility but low security. Mandatory access control is highly secure but too restrictive. Role-based access control combines both above, and not only is easy to manage, but also reduces complexity, costs, and probability of errors. Therefore, it has been greatly developed in recent years. The basic idea of the role-based access control (RBAC) is to divide different rôles according to different functional posts in the enterprise organization view, encapsulate the access permission of database resources in rôles, and allow users to indirectly access the database resources by assigning different rôles to the users.

[0003] A large number of tables and views are often built in large-scale application Systems, which makes the management and permissions of database resources very complicated. It is very difficult for a user to directly manage the access and permissions of the database resources. It requires the user to hâve a very thorough understanding of the database structure and to be familiar with the use of the SQL language. Once the application system structure or security requirements hâve changed, a large number of complex and cumbersome permission changes are required, and the security vulnerabilities caused by some unexpected authorization errors are very likely to occur. Therefore, designing a simple and efficient permission management method for large-scale application Systems has become a common requirement for Systems and system users. Therefore, designing a simple and efficient permission management method for large-scale application Systems has become a common requirement for Systems and system users.

[0004] The role-based permission control mechanism can manage the access permissions of the system simply and efficiently, which greatly reduces the burden and cost of the permission management of the System, and makes the permission management of the system more compilant with the business management spécifications of the application system.

[0005] However, the conventional role-based user permission management method adopts the role-to-user one-to-many relation mechanism, wherein the rôle has the nature of a group or class. That is, one rôle can simultaneously correspond to or be related to multiple users, and the rôle is similar to a post or a position or a type of work or other concepts. The permission authorization to a user under this relation mechanism is basically divided into the following three forms: 1. As shown in FIG. 1, the permission is directly authorized to the user, where the disadvantage is that the workload is large and the operation is frequent and cumbersome. When changes on the employée hâve occurred (such as transfer or résignation), ail permissions related to the employée need to be adjusted correspondingly. Especially, for administrators in a company, many permissions are involved. As the permission adjustment involves large workloads and is cumbersome, errors or omissions are likely to occur, thereby affecting the normal operation of the enterprise and even causing unpredictable losses.

[0006] 2. As shown in FIG. 2, the rôle (having the nature of a class/a group/a post/a type of work) is authorized (one rôle may be related to multiple users), the user obtains permissions through its rôle, and the permission authorization subject is the rôle that has the nature of a group or class. 3. As shown in FIG. 3, the above two forms are combined.

[0007] In the above descriptions, as both form 2 and form 3 need to authorize the rôle that has the nature of a class or group. The way of authorization through the rôle having the nature of a class/a group/a post/a type of work has the following disadvantages: 1. Operations are difficult when the user's permission has changed. In the actual process of using a system, the user's permissions often need to be adjusted during the operation process. For example, in processing of the change of employee's permissions, when the permissions of an employée related to the rôle hâve changed, it is improper to change the permissions of the entire rôle due to the change of the permissions of the individual employée, because this rôle is also related to other employées whose permissions remain 5 unchanged. Therefore, to deal with this situation, either a new rôle is created to fit the employée whose permissions hâve changed, or permissions are directly authorized to the employée (disengaged from the rôle) based on permission requirements. The above two processing methods not only take a long time but also cause mistakes easily for the rôle authorization in the case of a relatively large number of rôle permissions. It is cumbersome 10 for a user to operate, and errors occur easily, thereby resulting in loss to the System user.

[0008] When the form operation permissions of the employée or user hâve changed, either the employee/user is disengaged from the rôle, or a new rôle is added to meet the requirements of work. The defect of the first way is the same as that of the foregoing method of direct authorization to the user. In the second way, adding a new rôle involves 15 création, relation, and authorization of the rôle. Especially when there are many rôles and many users related to the rôles, it is difficult to remember which users are specifically related to the rôle.

[0009] 2. It is difficult to remember the spécifie permissions contained in a rôle for a long time. If the rôle has many permission function points, as time goes by, it is difficult 20 to remember the spécifie permissions of the rôle, and it is even more difficult to remember the permission différences between rôles with similar permissions. The permissions of similar rôles are also easily confusable. If a new user needs to be related, it is impracticable to accurately détermine how to select a relation.

[0010] 3. Because user permissions change, more rôles will be created (if new rôles are not created, direct authorization to the user will be increased greatly), and it is more difficult to distinguish spécifie différences between permissions of the rôles.

[0011] 4. When a user is transferred from a post, if many permissions of the transferred user need to be assigned to other users, distinguishing the permissions of the transferred user and creating rôles to relate to the other users respectively are necessary during the processing. Such operations are not only complicated and time-consuming, but also prone to errors.

[0012] Instant messaging is an important internai and external communication tool for various enterprises and institutions. Currently, commonly used instant messaging software includes QQ, WeChat, MSN, Fetion, and the like. In conventional enterprise management modes, instant messaging accounts such as QQ numbers are usually directly assigned to individuals or users. During the process of using, the following problems will occur. A. If an employée works for multiple posts in the enterprise, work handover cannot be performed effectively when the employée resigns or is transferred. For example, Zhang

San serves as a sales engineer in the sales department I of the building materials business division and a sales engineer in the sales department I of the aircraft business division at the same time. Zhang San now needs to be disengaged from the sales engineer in the sales department I of the business aircraft division, and this post will be taken over by Li Si. However, Zhang San's QQ account cannot be directly handed over to Li Si because many building materials-related customers still remain in the Zhang San's QQ account and need to be further contacted and followed up. Li Si has to use a new QQ account to add the aircraft-related customers (adding a customer is subject to consent of the customer, which not only increases the workload and delays the work, but also faces the possibility of being rejected by the customer due to the customer's unawareness of who is requesting to add, thus affecting the work). In this way, on the one hand, it is likely to give an unfavorable impression on the customer. On the other hand, Li Si is also unaware of Zhang San's previous communication (message records) with the aircraft-related customers, and the aircraft-related customers are likely to continue to contact Zhang San, thus tending to leak confidential information on the aircraft-related customers.

[0013] B. If Zhang San resigns and Li Si takes over Zhang San’s QQ account, Li Si will be able to see the QQ message records and new messages from the building materials-related customers (Li Si takes over the sales work of only the aircraft business division), thus tending to leak the confidential information of the building materials-related customers. Similarly, an employée who only takes over the sales work of the building materials business division is improper to take over the Zhang San's QQ account, because the employée who takes over the Zhang San's QQ account will see the QQ message records and new messages from the aircraft-related customers.

[0014] C. The QQ account is allocated to an individual without being bound to a fixed individual or user for life, and is manually allocated to an employée for use (manually relating/allocating the QQ account to the employée has obvious disadvantages: in the long-term process of repeated and continuous allocation, after the QQ account is allocated to an employée, the work scope corresponding to the employée is very likely to be sharply different from the work scope corresponding to the QQ account allocated to the employée, or even there may be an error occurring therebetween; but the QQ account is still used, and even is in use for a relatively long or a very long period of time, which may bring great perplexities and troubles to subséquent work and bring immeasurable losses). Therefore, in the process of allocation, leakage of the confidential information of the enterprise is very likely to occur. For example, a QQ account was first allocated to the salesperson Zhang San for use (Zhang San is responsible for the sales in the building materials sector). Later, Zhang San gave up the QQ account due to résignation or other reasons, and the QQ account was allocated to the salesperson Li Si for use (Li Si is responsible for the sales in the aircraft sector), and then after the QQ account is no longer used by Li Si, it is allocated to Wang Wu who was a salesperson in charge of the sales in the software sector, and so on. In this way, the incoming and outgoing messages in the QQ account may involve the customers in ail sectors of the company. The company divides the salespersons' market scopes from the perspective of industrial sectors, and forbids a salesperson from obtaining any information on other sectors beyond the sector in the charge of the salesperson. The above problem is grim enough, but even worse: if the customers from the sector not undertaken by a salesperson contact with the salesperson through the QQ account previously, and may keep sending subséquent messages to the QQ account, the subséquent messages will be constantly leamed by the salesperson who is not supposed to know. The situation could be even worse. If the QQ account that has been used by the financial personnel and the QQ account that has been used by the research and development personnel are related to a salesperson after being related repeatedly, the confidential research and development information or the confidential financial information will be leamed by the salesperson currently in relation, and the leakage of sensitive information is very likely to occur and may cause gross losses to the company.

[0015] D. Whenever an employée joins the company or is transferred to a new post, an instant messaging account needs to be related to the employée, which involves a huge workload (or relation errors may occur). Moreover, certain hystérésis exists in re-relating the instant messaging account to the employée, and will affect the normal progress of relevant work. For example, when an employée A is transferred from a position as a production superviser to a position as a sales superviser, after the current instant messaging account of the employée A is handed over to his/her successor, if the employée A is not related to a new instant messaging account, the employée A cannot carry out corresponding work for lack of an instant messaging account currently. If the current instant messaging account of the employée A is not handed over to his/her successor, the successor cannot learn previous communication information related to business, which is unfavorable to the normal progress of the work. For another example, an employée A who serves as both a production superviser and an after-sales superviser is new disengaged from the position as the production superviser (the instant messaging account of the employée A is not suitable for handover to his/her successor because it contains the communication information about the work of the after-sales superviser). If a new instant messaging account is allocated to the successor of the production superviser, the communication contact persons (such as equipment maintenance personnel, and outsourced manufacturera) need to be notified one by one. This not only involves a heavy workload but also imposes additional work to the opposing party. In addition, the employée A may still receive subséquent production-related communication messages (for example, in the case that an information sender is unaware of the disengagement of the employée A from the position as a production supervisor). For another example, when the employée A is transferred from the position as a production supervisor to the position as a sales supervisor, if no new instant messaging account is allocated to the employée A immediately after the current instant messaging account of the employée A is handed over to his/her successor, the employée A cannot handle work through an instant messaging account during the lag, which is unfavorable to the normal progress of the work.

SUMMARY

Technical Problems

[0016] The object of the présent invention is to overcome the disadvantages of the 5 prior art, and provide a method for managing an instant messaging account in a management System, in which one role-nature instant messaging account is bound to one rôle. An employée (when recruited) obtains a role-nature instant messaging account through a rôle related to a corresponding user. When the employée resigns, a System administrator (or a corresponding administrator) directly cancels the relation of the user corresponding to 10 the employée to the rôle, so that the resigned employée automatically loses the permission of using the role-nature instant messaging account, thus avoiding the risks of leaking confidential information of the enterprise. When the employée is transferred from a post, the System administrator (or the corresponding administrator) directly cancels the relation of the employée (the user corresponding to the employée) to the original rôle, and then 15 relates the employée to a new rôle so that the employée automatically obtains the role-nature instant messaging account corresponding to the new rôle. This achieves seamless handover, and ensures that the instant messaging account used by the user is updated in time, without the hystérésis or omission of the handover of the messaging account, and without affecting the employee's normal use of the messaging account. The 20 risks of leaking confidential information are also avoided.

Solutions to Problems

Technical Solutions

[0017] The object of the présent invention is achieved by using the following technical solutions. A method for managing an instant messaging account in a management 25 System includes the following steps:

[0018] (1) creating a rôle in a System, wherein said rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles;

[0019] (2) relating a role-nature instant messaging account to the rôle according to work content of the rôle in the management System, wherein during the same period, one role-nature instant messaging account can only be related to one rôle, and one rôle can only be related to one role-nature instant messaging account and

[0020] (3) creating a relation between a user and a rôle, and for any user, using the role-nature instant messaging accounts related to ail rôles related to the user as role-nature instant messaging accounts of the user and/or an employée corresponding to the user.

[0021] Step (3) may be performed after step (1), before step (2), or after step (2).

[0022] After a role-nature instant messaging account is related to a rôle, the role-nature instant messaging account related to the rôle cannot be replaced; or, after a role-nature instant messaging account is related to a rôle and the role-nature instant messaging account is put into use, the role-nature instant messaging account related to the rôle cannot be replaced.

[0023] When a role-nature instant messaging account of a rôle needs to be replaced, a relation ofthe rôle to the original role-nature instant messaging account is canceled, and the rôle is related to a new role-nature instant messaging account.

[0024] The method for managing an instant messaging account further includes: selecting one or more rôles as supervising rôles, and setting a supervised rôle for each supervising rôle respectively, so that a user related to the supervising rôle or an employée corresponding to the user can operate role-nature instant messaging accounts related to ail supervised rôles corresponding to the supervising rôle, wherein said operation includes viewing communication content.

[0025] The method for managing an instant messaging account further includes: relating an individual-nature instant messaging account to a user/an employée, wherein during the same period, one user/one employée can only be related to one individual-nature instant messaging account, and one individual-nature instant messaging account can only be related to one user/one employée. In the présent application, the user and the employée are in a one-to-one relation. That is, one user corresponds to one employée, and one employée corresponds to one user. The correspondence between the user and the employée, once established, is always sustained, and the user who has already corresponded to an employée cannot correspond to another employée.

[0026] After an individual-nature instant messaging account is related to a user/an 5 employée, the individual-nature instant messaging account related to the user/employee cannot be replaced; or, after an individual-nature instant messaging account is related to a user/an employée and the individual-nature instant messaging account is put into use, the individual-nature instant messaging account related to the user/employee cannot be replaced.

[0027] When an individual-nature instant messaging account is related to a user, the individual-nature instant messaging account related to the user is used as an individual-nature instant messaging account of an employée corresponding to the user.

[0028] When an individual-nature instant messaging account is related to an employée, the individual-nature instant messaging account related to the employée is used 15 as an individual-nature instant messaging account of a user corresponding to the employée.

[0029] The method for managing an instant messaging account further includes: selecting one or more rôles as supervising rôles, and setting a supervised rôle for each supervising rôle respectively, so that: a user related to the supervising rôle or an employée corresponding to the user can operate individual-nature instant messaging accounts of a 20 user related to ail supervised rôles corresponding to the supervising rôle; or a user related to the supervising rôle or an employée corresponding to the user can operate individual-nature instant messaging accounts of an employée corresponding to a user related to ail supervised rôles corresponding to the supervising rôle.

[0030] The role-nature instant messaging account is an account of an instant 25 messaging application in the System or an account of instant messaging software provided by a third party, and the individual-nature instant messaging account is an account of an instant messaging application in the System or an account of instant messaging software provided by a third party.

ΙΟ

Bénéficiai Effects of the Invention

Bénéficiai Effects

[0031] The présent invention has the following bénéficiai effects. (1) The présent invention provides a method for managing an instant messaging account in a management 5 System, in which one role-nature instant messaging account is bound to one rôle. An employée (when recruited) obtains a role-nature instant messaging account through a rôle related to a corresponding user. When the employée resigns, a system administrator (or a corresponding administrator) directly cancels the relation of the user corresponding to the employée to the rôle, so that the resigned employée automatically loses the permission of 10 using the role-nature instant messaging account, thus avoiding the risks of leaking confïdential information of the enterprise. When the employée is transferred from a post, the system administrator (or the corresponding administrator) directly cancels the relation of the employée (the user corresponding to the employée) to the original rôle, and then relates the employée to a new rôle so that the employée automatically obtains the 15 role-nature instant messaging account corresponding to the new rôle. This achieves seamless handover, and ensures that the instant messaging account used by the user is updated in time, without the hystérésis or omission of the handover of the messaging account, and without affecting the employee's normal use of the messaging account. The risks of leaking confïdential information are also avoided.

[0032] Résignation example: A role-nature instant messaging account related to a rôle production worker 1 is a QQ number 123456. When a user corresponding to an employée Zhang San is related to the production worker 1, Zhang San uses the QQ number 123456. When Zhang San resigns, a system administrator (or a corresponding administrator) directly cancels the relation of the user corresponding to Zhang San to the 25 rôle production worker 1, and therefore, Zhang San automatically loses the permission of using the QQ number 123456, thus avoiding the leakage of confïdential information about the production worker 1 to Zhang San due to the hystérésis of QQ number handover. When a newly recruited employée Li Si takes over the work of Zhang San, the administrator directly relates a user corresponding to Li Si to the production worker 1, so ll that Li Si automatically obtains the permission of using the role-nature QQ number 123456 corresponding to the rôle production worker 1 , without a need to re-allocate a new QQ number to Li Si. The operation is simple and fast, and the workload is greatly reduced. In addition, Li Si who takes over the work can view the historical messages previously exchanged between Zhang San and the QQ contact person, thus bringing better handover effects, facilitating the normal progress of the work, and achieving the ease of use.

[0033] Post transfer example: An employée Zhang San needs to be transferred from a production department to an after-sales department. The System administrator cancels the relation of the user corresponding to Zhang San to the original rôle production worker 1, and then relates Zhang San to a new rôle after-sales staff 3 in the after-sales department, so that Zhang San automatically obtains the permission of using a role-nature QQ number 987654 corresponding to the rôle after-sales staff 3.

[0034] (2) According to the présent invention, a role-nature instant messaging account is related to each rôle, and a corresponding role-nature instant messaging account is allocated to an employée while a post number or a job is allocated to the employée, without a need to allocate an instant messaging account to the employée separately. No hystérésis of allocating the role-nature instant messaging account occurs in the case of résignation, post transfer, recruitment, and the like, thus reducing the workload of allocating instant messaging accounts.

[0035] For example, after the user corresponding to an employée A is related to a rôle A and a rôle B, the role-nature instant messaging accounts related to the rôle A and the rôle B are automatically allocated to the employée A, without a need to separately allocate an instant messaging account to the employée A.

[0036] (3) After an employée is transferred from a post or resigned, the role-nature instant messaging account related to the rôle, which needs to be allocated to another employée, will not be allocated to an employée who does not undertake work content of the rôle because the rôle in the présent invention has the nature of a post number/station number, thus preventing the communication messages from being leaked to unrelated persons while the instant messaging account is transferred to another user.

[0037] For example, the user corresponding to an employée A is related to both a rôle of an appliance salesperson 1 and a rôle of a software salesperson 1. Since the employée A has resigned (when the employée A resigns, both the rôle of the appliance salesperson 1 and the rôle of the software salesperson 1 are released from the relation to the user corresponding to the employée A, and therefore, the employée A or a user corresponding to the employée A automatically loses the permission of using the role-nature instant messaging account related to the appliance salesperson 1 and the role-nature instant messaging account related to the software salesperson 1 ), the appliance salesperson 1 is related to a user corresponding to an employée B (the employée B obtains the role-nature instant messaging account related to the appliance salesperson 1), and the software salesperson 1 is related to a user corresponding to an employée C (the employée C obtains the role-nature instant messaging account related to the software salesperson 1). In this way, the employée B can only obtain the information about appliance sales through the role-nature messaging account corresponding to the appliance salesperson 1 , without an access to the information about software sales. Similarly, the employée C can only obtain the information about software sales through the role-nature messaging account corresponding to the software salesperson 1, without an access to the information about appliance sales.

[0038] (4) In the présent invention, a rôle is related to a role-nature instant messaging account according to the work content. Therefore, when sending a message, a contact person in the messaging account does not need to worry about whether the content of the message will be leaked to unrelated persons, because the current user of the role-nature instant messaging account is surely in charge of the relevant work currently. For example, the work content of a rôle A is attendance statistics, and the rôle A is related to an instant messaging account X. Therefore, after the rôle A is related to the user corresponding to the employée A, the employée A becomes a current user of the instant messaging account X, and the current work content of the employée A surely includes attendance statistics. After a contact person in the instant messaging account X sends an attendance-related message to the instant messaging account X, the attendance-related message will be invisible to any unrelated person.

[0039] (5) After a rôle is related to a role-nature instant messaging account, the role-nature instant messaging account related to the rôle cannot be replaced. In this way, ail the messages related to the work content of the rôle are collected in the messaging account, without the need to worry about whether the instant messaging account is changed midway.

[0040] For example, once the rôle A is related to the instant messaging account X, the rôle A cannot be related to another instant messaging account, and the instant messaging account X cannot be related to another rôle either.

[0041] (6) A user related to a supervising rôle or an employée corresponding to the user, if authorized by the supervising rôle, is entitled to view the communication content of an instant messaging account of a user related to a supervised rôle or an employée corresponding to the user (or to view the communication content of an instant messaging account related to the supervised rôle), thereby facilitating a supervisor in supervising and managing the work of his/her subordinates (or corresponding rôles).

[0042] (7) An individual-nature instant messaging account is set for a user/an employée to send and receive private information of the user/employee, thus separating a work instant messaging account (a role-nature instant messaging account, which is used to process instant messaging information about work) from a private instant messaging account (an individual-nature instant messaging account, which is used to process private instant messaging information). Because the user/employee's individual-nature instant messaging account will not be allocated to other employees/users (once the individual-nature instant messaging account is related to an employée or user, the relation is always sustained and unreplaceable), the user/employee does not need to worry about the leakage of private information caused by the handover of the messaging account after a job change.

[0043] For example, if an employée A is late for work but his/her supervisor refrains from deducting wages of the employée A in view of good business results of the employée A, the supervisor may explain this by sending a message to the individual-nature instant messaging account of the employée A, without worrying about a risk of bringing adverse effects on the company in conséquence of leaking the message to a successor who takes over the work of the employée A after the employée A is resigned or transferred from a post.

[0044] (8) In the présent application, the rôle is in one-to-one relation to the user.

During the same period, one rôle can only be related to a unique user, and one user is related to one or more rôles. The advantage thereof is that the permissions can be obtained as long as the user is related to the rôle (that is, the user obtains the permissions of its related rôle), and changes of the role's permissions are much fewer than the changes of the user's permissions in a conventional mechanism. As there are few changes of the quantity of rôles having the nature of an independent individual (the nature of a post number or a station number), despite a high turnover of employées, few changes occur in the post number/station number (even there is no change within a certain period, that is, the rôle does not change). This greatly simplifies the user's permission management and reduces System overheads.

[0045] (9) The operations such as dynamic management, recruitment, and transfer are simple, convenient, efficient and highly reliable. The application of recruitment or résignation or transfer in the permission management is simple. When an employée or a user has changed, it is unnecessary to reset permissions. It is only necessary for a user to cancel the relation or be related to the rôle. For the user who is no longer in the rôle, the relation to the rôle is canceled; and the user who takes over the rôle is related to the rôle corresponding to the post number. The user related to the rôle automatically obtains the role-nature messaging account of the rôle and its operation permission, without a need to re-authorizing the rôle, thus significantly increasing the effïciency, security, and reliability of System setting.

[0046] For example, because user Zhang San resigns or is transferred from a post, Zhang San no longer works as a rôle of purchaser 3, and Zhang San then cancels the relation to the purchaser 3. Meanwhile, Li Si takes over the work as the rôle of purchaser 3, and it is only necessary to relate Li Si to the rôle, so Li Si automatically obtains the permissions ofthe rôle of purchaser 3 (because the rôle has been authorized according to the role's work content) and a role-nature messaging account.

[0047] (10) The conventional permission management mechanism defines the rôle as the nature of a group, a type of work (a post), a class or the like. The rôle is in a one-to-many relation to the user. In the actual process of using a system, the user's permissions often need to be adjusted during the operation process. For example, in Processing the change of employee's permissions, when the permissions of an employée related to the rôle hâve changed, it is improper to change the permissions of the entire rôle due to the change of the permissions of the individual employée, because this rôle is also related to other employées whose permissions remain unchanged. To deal with this situation, either a new rôle is created to fit the employée whose permissions hâve changed, or permissions are directly authorized to the employée (disengaged from the rôle) based on permission requirements. The above two processing methods not only take a long time but also cause mistakes easily for the rôle authorization in the case of a large number of rôle permissions. It is cumbersome for a user to operate, and errors occur easily, resulting in the loss to the user of the system.

[0048] However, under the method of the présent application, as the rôle is an independent individual, the object can be achieved by changing the permissions ofthe rôle. Although the method in the présent application seems to increase the workload during system initialization, by means of copying or the like, the rôle can be created or authorized more efficiently than the conventional rôles having the nature of a group/a class. As it is unnecessary to consider the commonality of the rôles having the nature of a group/a class when satisfying the related users, the solutions in the présent application make the permission setting clear and explicit. Especially after the system has been used for a period of time (after the permissions of the user/role hâve changed dynamically), the solutions in the présent application can significantly improve the efficiency of permission management for the user of the system in using the system, make the dynamic authorization simpler, more convenient, clearer and more explicit, and improve the efficiency and reliability of the permission setting.

[0049] (11) The conventional rôle authorization method with the nature of a group/class is prone to errors. The method provided in the présent application significantly reduces the probability of authorization errors, because the method of the présent application only needs to consider the rôle as an independent individual, without considering the commonality of multiple users related to the rôle having the nature of a group under the conventional method. Even if errors occur in authorization, only the user 5 related to the rôle is affected. However, in the case of the conventional rôle having the nature of a group, ail users related to the rôle are affected. Even if errors occur in authorization, the correction method in the présent application is simple and takes a short time, while in the case of the conventional rôle having the nature of a group, the commonality of the permissions of ail users related to the rôle needs to be considered 10 during correcting the error. The modification is cumbersome, complex, and error-prone when the rôle has many function points, and in many cases, the problem cannot be solved unless a new rôle is created.

[0050] (12) In the conventional group-based rôle authorization method, if the rôle has many permission function points, as time goes by, it is difficult to remember spécifie 15 permissions ofthe rôle, and it is even more difficult to remember the permission différences between rôles with similar permissions. If a new user needs to be related, it is impracticable to accurately détermine how to select a relation. In the method of the présent application, the rôle itself has the nature of a post number or station number, such that the sélection can be made easily.

[0051] (13) When a user is transferred from a post, if many permissions of the transferred user need to be assigned to other users, in processing, it is necessary to distinguish the permissions of the transferred user and create rôles to relate to other users respectively. The operations are complicated, time-consuming, and prone to errors.

[0052] The method in the présent application is as follows: The transferred user is 25 related to several rôles. When the user is transferred, the relation between the user and the rôles in the original department is first canceled (the canceled rôles may be re-related to other users), and then the user is related to a rôle in a new department. The operation is simple and not error-prone.

BRIEF DESCRIPTION OF THE DRAWINGS

DESCRIPTION OF THE DRAWINGS

[0053] FIG. 1 is a schematic diagram in which a system directly authorizes a user in the prior art;

[0054] FIG. 2 is a schematic diagram in which a system authorizes a rôle having the nature of a group/a class in the prior art;

[0055] FIG. 3 is a schematic diagram in which a system both directly authorizes a user and authorizes a rôle having the nature of a group/a class in the prior art;

[0056] FIG. 4 is a schematic diagram in which a system authorizes a user through a rôle having the nature of an independent individual according to the présent invention; and

[0057] FIG. 5 is a flowchart of a management method according to an embodiment of the présent invention.

DETAILED DESCRIPTION

Description of Embodiments

[0058] The technical solutions of the présent invention will be further described in detail below with reference to the accompanying drawings, but the protection scope of the présent invention is not limited to the following descriptions.

[0059] [Embodiment 1] As shown in FIG. 5, a method for managing an instant messaging account in a management system includes the following steps: creating a system rôle. As shown in FIG. 4, the rôle is an independent individual not a group/a class. During the same period, one rôle can only be related to a unique user, and one user is related to one or more rôles. One user corresponds to one employée, one employée corresponds to one user, and an employée détermines (obtains) permissions based on a rôle related to a user corresponding to the employée. An employée and a user are in a one-to-one relation reciprocally and are bound for life. After a user corresponds to an employée, the user belongs to the employée, and the user cannot relate to other employées. If the employée resigns, the user cannot correspond to other employées either. After the employée is re-recruited, the employée still corresponds to the original user.

[0060] The method further includes: relating a role-nature instant messaging account to the rôle according to the work content of the rôle in the management System (for a rôle, this step may further be understood as: relating an instant messaging account to the 5 rôle according to the work content of the rôle in the management System, and using the instant messaging account as a role-nature instant messaging account of the rôle), wherein the role-nature instant messaging account is an instant messaging account having the nature of a post number/a station number. During the same period, a role-nature instant messaging account can only be related to one rôle, and one rôle can only be related to one role-nature instant messaging account. When a role-nature instant messaging account of a rôle needs to be replaced, the relation ofthe rôle to the original role-nature instant messaging account is canceled, and the rôle is related to a new role-nature instant messaging account.

[0061] The role-nature instant messaging account is an account of an instant messaging application (software) in the System (that is, the instant messaging account is an 15 instant messaging account in the System; in this case, the method further includes a step of creating an instant messaging account/an role-nature instant messaging account), and/or an account of instant messaging software provided by a third party (that is, the instant messaging account is a QQ number, a WeChat number, or the like).

[0062] The method for managing an instant messaging account in a management 20 System further includes: creating a relation between a user and a rôle, and for any user, using the role-nature instant messaging accounts related to ail rôles related to the user as role-nature instant messaging accounts ofthe user and/or an employée corresponding to the user.

[0063] In the présent invention, one role-nature instant messaging account is bound 25 to one rôle. An employée obtains a role-nature instant messaging account through a rôle related to a corresponding user. When the employée resigns, a System administrator (or a corresponding administrator) directly cancels the relation of the user corresponding to the employée to the rôle, so that the resigned employée automatically loses the permission of using the role-nature instant messaging account, thus avoiding the risks of leaking confidential information of the enterprise. When the employée is transferred from a post, the system administrator (or the corresponding administrator) directly cancels the relation ofthe employée to the original rôle, and then relates the employée to a new rôle so that the employée automatically obtains a role-nature instant messaging account corresponding to the new rôle. This achieves seamless handover, and ensures that the instant messaging account used by the user is updated in time, without the hystérésis or omission of the handover ofthe messaging account, and without affecting the employee's normal use ofthe messaging account. The risks of leaking confidential information can also be avoided.

[0064] Résignation example: A role-nature instant messaging account related to a rôle production worker 1 is a QQ number 123456. When a user corresponding to an employée Zhang San is related to the production worker 1 , Zhang San uses the QQ number 123456. When Zhang San resigns, the system administrator (or the corresponding administrator) directly cancels the relation of the user corresponding to Zhang San to the rôle production worker 1, and therefore, Zhang San automatically loses the permission of using the QQ number 123456, thus avoiding the leakage of confidential information about the production worker 1 to Zhang San due to the hystérésis of QQ number handover. When a newly recruited employée Li Si takes over the work of Zhang San, the administrator directly relates the user corresponding to Li Si to the production worker 1, so that Li Si automatically obtains the permission of using the role-nature QQ number 123456 corresponding to the rôle production worker 1, without a need to re-allocate a new QQ number to Li Si. The operation is simple and fast, and the workload is greatly reduced. In addition, Li Si who takes over the work can view the historical messages previously exchanged between Zhang San and the QQ contact person, thus bringing better handover effects, facilitating the normal progress of the work, and achieving the ease of use.

[0065] Post transfer example: An employée Zhang San needs to be transferred from a production department to an after-sales department. The system administrator cancels the relation of the user corresponding to Zhang San to the original rôle production worker 1 , and relates Zhang San to a new rôle after-sales staff 3 in the after-sales department, so that Zhang San automatically obtains the permission of using a role-nature QQ number 987654 corresponding to the rôle after-sales staff 3.

[0066] After an employée is transferred from a post or resigned, the role-nature instant messaging account related to the rôle, which needs to be allocated to another 5 employée, will not be allocated to an employée who does not undertake work content of the rôle because the rôle in the présent invention has the nature of a post number/station number, thus preventing the communication messages from being leaked to unrelated persons while the instant messaging account is transferred to another user.

[0067] For example, the user corresponding to an employée A is related to an 10 appliance salesperson 1 and a software salesperson 1. Since the employée A has resigned, the appliance salesperson 1 is related to a user corresponding to an employée B, and the software salesperson 1 is related to a user corresponding to an employée C. Therefore, the employée B can only obtain information about appliance sales through the role-nature messaging account corresponding to appliance salesperson 1, without an access to 15 information about software sales. Similarly, the employée C can only obtain the information about software sales through the role-nature messaging account corresponding to software salesperson 1, without an access to the information about appliance sales.

[0068] In the présent invention, a rôle is related to a role-nature instant messaging account according to the work content, so that the content of messages from the contact 20 persons in the messaging account are free from being leaked to unrelated persons because the current user of the role-nature instant messaging account is surely in charge of the relevant work currently. For example, the work content of a rôle A is attendance statistics, and the rôle A is related to an instant messaging account X. Therefore, after the rôle A is related to a user corresponding to the employée A, the employée A becomes a current user 25 ofthe instant messaging account X, and the current work content of the employée A surely includes attendance statistics. After a contact person in the instant messaging account X sends an attendance-related message to the instant messaging account X, the attendance-related message will be invisible to any unrelated person.

[0069] [Embodiment 2] As shown in FIG. 5, a method for managing an instant messaging account in a management System includes the following steps: creating a System rôle. As shown in FIG. 4, the rôle is an independent individual not a group/a class. During the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles; relating a role-nature instant messaging account to a rôle according to 5 work content of the rôle in the management System, wherein during the same period, one role-nature instant messaging account can only be related to one rôle, and one rôle can only be related to one role-nature instant messaging account; and creating a relation between a user and a rôle, and for any user, using the role-nature instant messaging accounts related to ail rôles related to the user as role-nature instant messaging accounts of the user and/or an 10 employée corresponding to the user.

[0070] In this embodiment, after a role-nature instant messaging account is related to a rôle, the role-nature instant messaging account related to the rôle cannot be replaced; or, after a role-nature instant messaging account is related to a rôle and the role-nature instant messaging account is put into use, the role-nature instant messaging account related to the 15 rôle cannot be replaced. That is, the rôle is bound to the role-nature instant messaging account for life. If the rôle is disabled, the corresponding role-nature instant messaging account cannot be related to any more rôles, but a user related to a supervising rôle corresponding to the rôle or an employée corresponding to the user can still operate the role-nature instant messaging account. After the rôle is re-enabled, the rôle still uses the 20 originally related role-nature instant messaging account.

[0071] After a rôle is related to a role-nature instant messaging account, the role-nature instant messaging account related to the rôle cannot be replaced. In this way, ail the messages related to the work content of the rôle are collected in the messaging account, without the need to worry about whether the instant messaging account is changed midway.

[0072] For example, once the rôle A is related to the instant messaging account X, the rôle A cannot be related to another instant messaging account, and the instant messaging account X cannot be related to another rôle either.

[0073] [Embodiment 3] In this embodiment, the method for managing an instant messaging account further includes: selecting one or more rôles as supervising rôles, and setting a supervised rôle for each supervising rôle respectively, so that a user related to the supervising rôle or an employée corresponding to the user can operate role-nature instant messaging accounts related to ail supervised rôles corresponding to the supervising rôle, wherein said operation includes viewing communication content.

[0074] If the communication content is not checked by the user related to the supervised rôle, the communication content is still displayed as an unchecked status, but check records of the supervising rôle will be displayed, for example, the supervising rôle who performed the operation, the user related to the supervising rôle, and the employée corresponding to the user, operation time, operation content, and the like.

[0075] The délétion of the communication content of the role-nature instant messaging account is subject to the consent and confirmation of the supervising rôle (or the corresponding administrator), thus preventing useful communication content from being deleted maliciously.

[0076] [Embodiment 4] In this embodiment, the method for managing an instant messaging account further includes: selecting one or more rôles as supervising rôles, and setting a supervised rôle for each supervising rôle respectively, so that: a user related to the supervising rôle or an employée corresponding to the user can operate individual-nature instant messaging accounts of a user related to ail supervised rôles corresponding to the supervising rôle; or a user related to the supervising rôle or an employée corresponding to the user can operate individual-nature instant messaging accounts of an employée corresponding to a user related to ail supervised rôles corresponding to the supervising rôle.

[0077] If authorized, the user related to the supervising rôle is entitled to view the communication content of the instant messaging account of the user/employee related to the supervised rôle, thus facilitating a supervisor in supervising and managing the work of his/her subordinates.

[0078] [Embodiment 5] In this embodiment, the method for managing an instant messaging account further includes: relating an individual-nature instant messaging account to a user/an employée (for a user/an employée, this step can be further understood as:

relating an instant messaging account to the user/employee to serve as an individual-nature instant messaging account of the user/employee), wherein during the same period, one user/one employée can only be related to one individual-nature instant messaging account, and one individual-nature instant messaging account can only be related to one user/one employée.

[0079] The individual-nature instant messaging account is an account of an instant messaging application (software) in the System (that is, the instant messaging account is an instant messaging account in the System; in this case, the method further includes a step of creating an instant messaging account/an individual-nature instant messaging account), and/or an account of instant messaging software provided by a third party (that is, the instant messaging account is a QQ number, a WeChat number, or the like).

[0080] After the user/employee resigns, the individual-nature instant messaging account related to the user/employee will be suspended, and the individual-nature instant messaging account will not be allocated to another employee/user either, thus preventing leaking the communication content in the individual-nature instant messaging account. However, if authorized, the supervisor of the employée can still operate the individual-nature instant messaging account. If the employée is re-employed by the company after résignation, the original individual-nature instant messaging account of the employée is automatically re-al located to the employée or the user corresponding to the employée (once the individual-nature instant messaging account is related to the user, the relation is always sustained and cannot be changed; once the individual-nature instant messaging account is related to the employée, the relation is always sustained and cannot be changed).

[0081] After an individual-nature instant messaging account is related to a user/an employée, the individual-nature instant messaging account related to the user/employee cannot be replaced; or, after an individual-nature instant messaging account is related to a user/an employée and the individual-nature instant messaging account is put into use, the individual-nature instant messaging account related to the user/employee cannot be replaced.

[0082] When an individual-nature instant messaging account is related to a user, the individual-nature instant messaging account related to the user is used as an individual-nature instant messaging account of an employée corresponding to the user. When an individual-nature instant messaging account is related to an employée, the 5 individual-nature instant messaging account related to the employée is used as an individual-nature instant messaging account of a user corresponding to said employée.

[0083] An individual-nature instant messaging account is set for a user/an employée to send and receive private information of the user/employee, thus separating a work messaging account (a role-nature instant messaging account, which is used to exchange 10 work information within a work scope corresponding to the account) from a private messaging account (an individual-nature instant messaging account, which is used to exchange private information). Because the user/employee's individual-nature instant messaging account will not be allocated to other employees/users, the user/employee do not need to worry about the leakage of the private information caused by the handover of the 15 messaging account after a job change.

[0084] For example, if an employée A is late for work but his/her supervisor refrains from deducting wages of the employée A in view of good business results of the employée A, the supervisor may explain this by sending a message to the individual-nature instant messaging account of the employée A, without worrying about a risk of bringing 20 adverse effects on the company in conséquence of leaking the message to a successor who takes over the work of the employée A after the employée A is resigned or transferred from a post.

[0085] In the présent application, in creating a rôle, a department is necessarily selected for it. Once a department is selected for the rôle, the rôle belongs to the department. 25 The name of the rôle is unique in the department, the number of the rôle is unique in the System, and the rôle is authorized based on the work content of the rôle.

[0086] If the user needs to be transferred across the departments, the method further includes a step of managing the transfer of a user across the departments, specifically including: (1) canceling a relation of the user to a rôle in an original department; and (2) relating the user to a rôle in a new department, so that the user automatically obtains the permissions corresponding to the instant messaging account related to the rôle.

[0087] In the above embodiment, as shown in FIG. 4, the instant messaging account management in the présent application adopts a rôle having the nature of an independent 5 individual. In the following, the advantages of the method for authorizing permissions to a user based on a rôle having the nature of an independent individual are analyzed: The user détermines (obtains) permissions through its relation to the rôle. If the permissions of the user need to be modified, the permissions owned by the rôle are adjusted to achieve the object of changing the permissions ofthe user related to the rôle. Once the user is related to 10 the rôle, the user owns ail the operation permissions of the rôle.

[0088] A rôle is in a one-to-one relation to a user (when the rôle is related to one user, other users can no longer be related to that rôle; and if the rôle is not related to any user, the rôle can be selected to be related to other users; that is, in the same period, one rôle can only be related to one user). A user is in a one-to-many relation to rôles (one user 15 can be related to multiple rôles at the same time).

[0089] Définition of a rôle: A rôle does not hâve the nature of a group/a class/a category/a post/a position/a type of work or the like, but has non-collective nature. The rôle is unique and is an independent individual. Applied in an enterprise or an institution, the rôle is équivalent to a post number (the post number herein is not a post, and one post may 20 hâve multiple employées at the same time, but one post number can only correspond to one employée during the same period).

[0090] For example, in a company system, the following rôles may be created: a general manager, a deputy general manager 1, a deputy general manager 2, a manager of Beijing sales department I, a manager of Beijing sales department II, a manager of Beijing 25 sales department III, a Shanghai sales engineer 1, a Shanghai sales engineer 2, a Shanghai sales engineer 3, a Shanghai sales engineer 4, a Shanghai sales engineer 5, and so on. The relation between users and rôles is as follows: if Zhang San, the company s employée, serves as a deputy general manager 2 of the company and also serves as a manager of Beijing sales department I, the rôles to which Zhang San needs to be related are the deputy general manager 2 and the manager of Beijing sales department I, and Zhang San owns the permissions of the two rôles.

[0091] The concept of conventional rôles has the nature of a group/a class/a post/a position/a type of work, and one rôle can correspond to multiple users. However, in the présent application, the concept of rôle is équivalent to a post number/station number, and is also similar to the rôle in a film and a télévision drama: one rôle in the same period (in childhood, juvénile, middle-age...) can be played by only one actor or actress at the same time, but one actor or actress may play multiple rôles.

[0092] After the rôle is created, a user may be related to the rôle in the process of creating the user, or may be related to the rôle at any time after the user is created. After the user is related to the rôle, the user can be released from the relation to the rôle at any time, and the relation between the user and another rôle may be created at any time.

[0093] The rôle is composed of: a post name + a post number, for example, a workshop worker 1, a workshop worker 2, a workshop worker 3, and so on. The rôle is an independent individual, and is équivalent to the concept of a post number or a station number, but different from the rôle in a conventional permission management system. The concept of the rôle in the conventional permission management system has the nature of a group or class such as a post, a position, a type of work or the like.

[0094] The following example shows the relationship among an employée, a user, and a rôle after Zhang San, an employée, entered a company as follows: 1. Recruiting: after the employée is recruited, the rôle of the corresponding post number or station number is directly selected for the user (employée) to be related. For example, when Zhang San has joined the company (the company has assigned a user for Zhang San) and works at the sales department I to be responsible for selling refrigerator products in Beijing area (the corresponding rôle is sales engineer 5 under the sales department I), then the user Zhang San directly selects and is related to the rôle sales engineer 5.

[0095] 2. Adding position: After Zhang San has worked for a period of time, the company further arranges Zhang San to be responsible for selling TV products in Beijing area (the corresponding rôle is sales engineer 8 under the sales department I) and to serve as a supervisor of an after-sales department (the corresponding rôle is after-sales supervisor 1). Therefore, two rôles, that is, sales engineer 8 under the sales department I and after-sales supervisor 1 under the after-sales department, are additionally related to the user Zhang San. In this case, the employée Zhang San is related to three rôles: sales engineer 5 and sales engineer 8 under the sales department I, and after-sales supervisor 1 under the after-sales department. Therefore, the user Zhang San owns the permissions of the three rôles.

[0096] 3. Reducing position: After a while, the company has decided to let Zhang

San serve as an after-sales manager (corresponding to a rôle after-sales manager under the after-sales department) without taking up other positions any more. Therefore, the user Zhang San is related to the rôle after-sales manager under the after-sales department, and is released from the relation to the previous three rôles (sales engineer 5 and sales engineer 8 under the sales department I, and after-sales supervisor 1 under the sales department). In this case, the user Zhang San owns only the permissions of the rôle after-sales manager under the after-sales department.

[0097] 4. Adjusting permissions of a rôle (adjusting the permissions of the rôle itself): if the company has decided to add permissions to the after-sales manager, the permissions only need to be added to the rôle of the after-sales manager. With the increase in the permissions of the rôle of the after-sales manager, the permissions of the user Zhang San are also increased.

[0098] 5. Résignation: After one year, Zhang San resigns. It is only necessary to cancel the relation of the user Zhang San to the rôle after-sales manager under the after-sales department.

[0099] For example, during the dynamic operation of the company, recruiting and resigning of staff often occur continuously, but post numbers or station numbers seldom change (or even remain unchanged within a period of time).

[0100] Conventional authorization method: In the case of a large quantity of system function points, authorizing the conventional rôles that hâve the nature of a group or class involves a large and cumbersome workload and is very error-prone, and errors are not easily détectable in a short time and tend to cause loss to a system user.

[0101] Authorization method of the présent application: in the présent application, 5 the authorization is made to the rôle having the nature of a post number or station number, and the user is related to the rôle to détermine (obtain) permissions. Therefore, the permissions of the user are controlled by only a simple user-role relation. Controlling the permissions is simple, easily opérable, clear, and explicit, thereby significantly improving the efficiency and reliability of authorization.

[0102] The above is only a preferred embodiment of the présent invention, and it should be understood that the présent invention is not limited to the forms disclosed herein, and is not to be construed as being limited to the other embodiments, but may be used in various other combinations, modifications and environments. Modification can be made by the techniques or knowledge of the above teachings or related art within the scope of the 15 teachings herein. Ail changes and modifications made by those skilled in the art without departing from the spirit and scope of the présent invention are intended to be within the protection scope of the appended claims.

Claims (5)

1. A method for managing an instant messaging account in a management system, comprising the following steps: creating a rôle in the system, wherein said rôle is an independent individual not a group/a class, and during the same period, one rôle can only be related to a unique user, while one user is related to one or more rôles; and relating a role-nature instant messaging account to the rôle according to work content of the rôle in the management system, wherein during the same period, one role-nature instant messaging account can only be related to one rôle during the same period, while one rôle can only be related to one role-nature instant messaging account; and creating a relation between a user and a rôle, and for any user, using the role-nature instant messaging accounts related to ail rôles related to the user as role-nature instant messaging accounts of the user and/or an employée corresponding to the user.

2. The method for managing an instant messaging account in a management system according to claim 1, wherein after a role-nature instant messaging account is related to a rôle, the role-nature instant messaging account related to the rôle cannot be replaced; or after a role-nature instant messaging account is related to a rôle and the role-nature instant messaging account is put into use, the role-nature instant messaging account related to the rôle cannot be replaced.

3. The method for managing an instant messaging account in a management system according to claim 1, wherein when a role-nature instant messaging account of a rôle needs to be replaced, a relation of the rôle to the original role-nature instant messaging account is canceled, and the rôle is related to a new role-nature instant messaging account.

4. The method for managing an instant messaging account in a management system according to claim 1, further comprising: selecting one or more rôles as supervising rôles, and setting a supervised rôle for each supervising rôle respectively, so that a user related to the supervising rôle or an employée corresponding to the user can operate role-nature instant messaging accounts related to ail supervised rôles corresponding to the supervising rôle, wherein said operation comprises viewing communication content.

5. The method for managing an instant messaging account in a management system according to claim 1, further comprising: relating an individual-nature instant messaging account to a user/an employée, wherein during the same period, one user/one employée can 5 only be related to one individual-nature instant messaging account, while one individual-nature instant messaging account can only be related to one user/one employée.

6. The method for managing an instant messaging account in a management system according to claim 5, wherein after an individual-nature instant messaging account is related to a user/an employée, the individual-nature instant messaging account related to the 10 user/employee cannot be replaced; or after an individual-nature instant messaging account is related to a user/an employée and the individual-nature instant messaging account is put into use, the individual-nature instant messaging account related to the user/employee cannot be replaced.

7. The method for managing an instant messaging account in a management system 15 according to claim 5, wherein when an individual-nature instant messaging account is related to a user, the individual-nature instant messaging account related to the user is used as an individual-nature instant messaging account of an employée corresponding to the user.

8. The method for managing an instant messaging account in a management system 20 according to claim 5, wherein when an individual-nature instant messaging account is related to an employée, the individual-nature instant messaging account related to the employée is used as an individual-nature instant messaging account of a user corresponding to said employée.

9. The method for managing an instant messaging account in a management system 25 according to claim 5, further comprising: selecting one or more rôles as supervising rôles, and setting a supervised rôle for each supervising rôle respectively, so that:

a user related to the supervising rôle or an employée corresponding to the user can operate individual-nature instant messaging accounts of a user related to ail supervised w

rôles corresponding to the supervising rôle; or a user related to the supervising rôle or an employée corresponding to the user can operate individual-nature instant messaging accounts of an employée corresponding to a user related to ail supervised rôles corresponding to the supervising rôle.

5 10. The method for managing an instant messaging account in a management System according to claim 1, wherein said role-nature instant messaging account is an account of an instant messaging application in the System or an account of instant messaging software provided by a third party.