A method of correlating fabric-level group membership with subnet-level group membership within a network fabric, comprising the steps of: creating a resource domain at a fabric level of the network, wherein the resource domain is a logical grouping of fabric resources; storing the resource domain in a memory; creating an admin partition in a subnet of the network fabric, wherein the admin partition is defined by a first P_Key, and wherein the first P_Key is unique throughout the subnet; storing the first P_Key in the memory; associating the resource domain with the admin partition; adding a first fabric resource to the resource domain, wherein the first fabric resource is identified by a first identifier, and wherein the first identifier is stored in the memory; creating a first relationship in the memory between the first identifier and the first P_Key that defines the admin partition, wherein the first relationship defines the first fabric resource as a member of the admin partition; adding a second fabric resource to the resource domain, wherein the second fabric resource is identified by a second identifier, and wherein the second identifier is stored in the memory; creating a second relationship in the memory between the second identifier and the first P_Key that defines the admin partition, wherein the second relationship defines the second fabric resource as a member of the admin partition; determining that the first domain resource and the second domain resource are members of the admin partition; granting access rights for the first domain resource to the second domain resource based on the determination that the first domain resource and the second domain resource are members of the admin partition; adding a child resource domain to the resource domain; adding a third fabric resource to the child resource domain, wherein the third fabric resource is identified by a third identifier, and wherein the third identifier is stored in the memory; and creating a third relationship in the memory between the third identifier and the first P_Key that defines the admin partition, wherein the third relationship defines the third fabric resource as a member of the admin partition. creating a resource domain at a fabric level of the network, wherein the resource domain is a logical grouping of fabric resources; storing the resource domain in a memory; creating an admin partition in a subnet of the network fabric, wherein the admin partition is defined by a first P_Key, and wherein the first P_Key is unique throughout the subnet; storing the first P_Key in the memory; associating the resource domain with the admin partition; adding a first fabric resource to the resource domain, wherein the first fabric resource is identified by a first identifier, and wherein the first identifier is stored in the memory; creating a first relationship in the memory between the first identifier and the first P_Key that defines the admin partition, wherein the first relationship defines the first fabric resource as a member of the admin partition; adding a second fabric resource to the resource domain, wherein the second fabric resource is identified by a second identifier, and wherein the second identifier is stored in the memory; creating a second relationship in the memory between the second identifier and the first P_Key that defines the admin partition, wherein the second relationship defines the second fabric resource as a member of the admin partition; determining that the first domain resource and the second domain resource are members of the admin partition; granting access rights for the first domain resource to the second domain resource based on the determination that the first domain resource and the second domain resource are members of the admin partition; adding a child resource domain to the resource domain; adding a third fabric resource to the child resource domain, wherein the third fabric resource is identified by a third identifier, and wherein the third identifier is stored in the memory; and creating a third relationship in the memory between the third identifier and the first P_Key that defines the admin partition, wherein the third relationship defines the third fabric resource as a member of the admin partition.