Patent ID: 8402266

Claim:
A system, comprising: a computer executing a role-based administration component configured to assign a user to existing roles, each of the existing roles comprising an entry defining an action with respect to messaging resources, the action comprising a commandlet that, when executed, implements a particular operation with respect to the messaging resources, create a new role comprising a new entry defining a new action with respect to the messaging resources, the new action comprising a further commandlet that, when executed, implements a further particular operation with respect to the messaging resources, and assign the user to the new role; a storage component configured to store the roles, the storage component storing a list of data describing the entry and the new entry, information denoting a purpose of the existing roles and the new role, a read limitation defining messaging resources for which read operations are to be allowed, and a write limitation defining messaging resources for which write operations are to be allowed; and a configuration component configured to modify at least one of the existing roles or the new role.