Patent ID: 8095970

Claim:
A computer-readable storage medium coupled to a computing device including executable instructions which, when executed, manage information by: defining a number of groups associated with a computer environment, wherein one or more of the number of groups includes a group member according to a group membership determination; defining a number of attribute-value sets for each group, each attribute-value set being associated with a policy; associating a first precedence parameter and a first attribute-value set with a first group; associating a second precedence parameter and a second attribute-value set with a second group; associating a third precedence parameter and a third attribute-value set with a third group; using a number of precedence-based rules and precedence parameters to resolve a plurality of attribute-value sets when a user belongs to multiple groups including sorting the plurality of attribute-value sets using associated precedence parameters; and, dynamically assigning a resultant set of attribute-values including a first value associated with a first attribute-value pair and a second value associated with a second attribute-value pair to a user object associated with the computer-implemented environment when more than one attribute-value set is associated with the user object including determining which of the more than one attribute-value sets corresponds with the resultant attribute-value set based at least in part on an associated precedence parameter and the number of precedence-based rules, otherwise assigning a default policy to the user object.