Patent ID: 7953823

Claim:
A method, in a data processing system comprising a hardware implemented processor, for selecting a security set for controlling an access to a network element comprising: discovering, by the processor, a plurality of security sets, each security set including an associated access right relevant to the access to the network element; identifying, by the processor, at least two of the plurality of security sets where the associated access right of each of the at least two security sets are in a conflict; determining, by the processor, whether each of the at least two security sets are associated with two or more groups; and resolving, by the processor, the conflict between the at least two security sets, wherein resolving the conflict further comprises: determining that the at least two security sets are associated with two or more groups; and generating a dynamic security set for selection as the associated security set in response to the at least two security sets being associated with two or more groups, wherein generating the dynamic security set comprises taking a union of each of the access rights associated with the at least two security sets.