A computer implemented method for management of first accounts of users on computer systems communicatively coupled with each other by one or more computer networks, wherein each of the users has at least one assigned first account on at least one of the computer systems, wherein each of the users of at least a portion of the users has more than one assigned first account on at least one of the computer systems, wherein each of the first accounts has one or more assigned authentication values and one or more assigned computer codes which execution is enabled for the user having the each of the first accounts after his authentication using the one or more assigned authentication values is performed on the respective computer system that has that first account, wherein the authentication values and the computer codes are stored across the computer systems, the method comprising: obtaining, using at least one processor of one of the computer systems, from the first accounts on the computer systems relationship data comprising relationship information between a set of the users, a set of the computer codes, and a set of the authentication values, the relationship information identifying which first code subset of the set of computer codes and which first authentication subset of the set of the authentication values are assigned to each user of the set of the users (502, 504); selecting, using the at least one processor, a user subset of the set of users, a second code subset of the set of computer codes, and a second authentication subset of the set of the authentication values, wherein the user subset, the second code subset, and the second authentication subset are selected according to a set of selection rules comprising the following rules: the second code subset is comprised in each of the first code subsets assigned to any of the respective users of the user subset, the user subset comprises more than one user, and the second authentication subset is comprised in one of the first authentication subsets assigned to one of the users of the user subset (506, 508, 510); and generating, using the at least one processor, a second account for the each of the users of the user subset, wherein the second authentication subset and the second code subset are assigned to the second account, wherein execution of any of the computer codes of the second code subset is enabled for the each of the users of the user subset after his authentication is performed on the one of the computer systems using the second authentication subset. obtaining, using at least one processor of one of the computer systems, from the first accounts on the computer systems relationship data comprising relationship information between a set of the users, a set of the computer codes, and a set of the authentication values, the relationship information identifying which first code subset of the set of computer codes and which first authentication subset of the set of the authentication values are assigned to each user of the set of the users (502, 504); selecting, using the at least one processor, a user subset of the set of users, a second code subset of the set of computer codes, and a second authentication subset of the set of the authentication values, wherein the user subset, the second code subset, and the second authentication subset are selected according to a set of selection rules comprising the following rules: the second code subset is comprised in each of the first code subsets assigned to any of the respective users of the user subset, the user subset comprises more than one user, and the second authentication subset is comprised in one of the first authentication subsets assigned to one of the users of the user subset (506, 508, 510); and generating, using the at least one processor, a second account for the each of the users of the user subset, wherein the second authentication subset and the second code subset are assigned to the second account, wherein execution of any of the computer codes of the second code subset is enabled for the each of the users of the user subset after his authentication is performed on the one of the computer systems using the second authentication subset. the second code subset is comprised in each of the first code subsets assigned to any of the respective users of the user subset, the user subset comprises more than one user, and the second authentication subset is comprised in one of the first authentication subsets assigned to one of the users of the user subset (506, 508, 510); and generating, using the at least one processor, a second account for the each of the users of the user subset, wherein the second authentication subset and the second code subset are assigned to the second account, wherein execution of any of the computer codes of the second code subset is enabled for the each of the users of the user subset after his authentication is performed on the one of the computer systems using the second authentication subset.