Patent ID: 8346952

Claim:
A computer-implemented method of providing ability to access a network resource for a plurality of resource group administrators, the method comprising: adding a network resource in a network storage architecture to a resource group of a resource group administrator of the plurality of resource group administrators, wherein the resource group administrator does not have administrative authority over the network resource; obtaining from the network resource a resource permission for the network resource, the resource permission stored in the network resource; authenticating a resource group level permission of the resource group administrator in order to determine if the resource group administrator is to be given the ability to access the network resource, wherein said authenticating includes comparing the resource group level permission of the resource group administrator with the resource permission; and upon successfully authenticating the resource group level permission, permitting the resource group administrator to add a copy of an object of the network resource to a managed objects structure of the resource group administrator, wherein only objects in the managed objects structure of the resource group administrator are accessible by the resource group administrator.