Patent ID: 8429711

Claim:
A method for providing secure access to applications, the method comprising the steps of: (a) receiving from a client system, by a server, a request from a user to execute an application; (b) identifying, by a policy system executing on the server and responsive to receiving the request, a role of the user; (c) determining, by the policy system, a first policy for a data set associated with the requested application; (d) determining, by the policy system, a second policy of an application group associated with the requested application; (e) determining, by the policy system, a third policy specific to the requested application; (f) contacting, by the policy system, an account administrative service to create and provision an execution environment for the requested application comprising a minimal set of computing privileges; and (g) invoking, by the account administrative service, an execution environment executing on the server, for the user, having the determined set of minimal privileges.