A method for a computer system to automatically determine authorization for actions associated with a data storage device including a plurality of devices (W, X, Y, Z), comprising: receiving a request from a requestor (Q, R, S, T, V) that includes an identification of the requestor, an identification of a requested action (B, C, M), and an identification of at least one device (W, X, Y, Z) of the data storage device corresponding to the requested action; determining if the requestor (Q, R, S, T, V) is in at least one requestor group of a plurality of requestor groups (Q,R,S,T; Q; R,S; V; S) listed in provided information on the computer system; determining, from the provided information, if the requested action (B, C, M) is in a list of action types associated with the requestor (Q, R, S, T, V); and determining, from the provided information, if the at least one device (W, X, Y, Z) is in a list of devices associated with the requestor and the requested action (B, C, M), characterized in that the provided information for the plurality of requestor groups includes information for at least one individual requestor group with one requestor (Q; V; S) and information for at least one group of multiple requestors (Q,R,S,T; R,S), wherein at least one requestor is in more than a single requestor group, wherein the information for the at least one group of multiple requestors (Q,R,S,T; R,S) is separately accessible from the information for the at least one individual requestor group (Q; V; S), and wherein the request is allowed if the provided information indicates that the requested action is authorized on the at least one device for the at least one requestor group of the requestor. receiving a request from a requestor (Q, R, S, T, V) that includes an identification of the requestor, an identification of a requested action (B, C, M), and an identification of at least one device (W, X, Y, Z) of the data storage device corresponding to the requested action; determining if the requestor (Q, R, S, T, V) is in at least one requestor group of a plurality of requestor groups (Q,R,S,T; Q; R,S; V; S) listed in provided information on the computer system; determining, from the provided information, if the requested action (B, C, M) is in a list of action types associated with the requestor (Q, R, S, T, V); and determining, from the provided information, if the at least one device (W, X, Y, Z) is in a list of devices associated with the requestor and the requested action (B, C, M), characterized in that the provided information for the plurality of requestor groups includes information for at least one individual requestor group with one requestor (Q; V; S) and information for at least one group of multiple requestors (Q,R,S,T; R,S), wherein at least one requestor is in more than a single requestor group, wherein the information for the at least one group of multiple requestors (Q,R,S,T; R,S) is separately accessible from the information for the at least one individual requestor group (Q; V; S), and wherein the request is allowed if the provided information indicates that the requested action is authorized on the at least one device for the at least one requestor group of the requestor.