Patent ID: 8659997

Claim:
A system comprising: a processor; and memory coupled to the processor, the memory comprising executable instructions that when executed by the processor cause the processor to effectuate operations comprising: receiving a request to utilize a resource; generating a credential comprising a description of a resource allocation policy pertaining to the resource; issuing the credential; performing a first query to a policy repository comprising a plurality of resource allocation policies; authenticating access to the resource based on a result of the first query; performing a second query to the policy repository; authorizing the credential based on a result of the second query; granting the request to utilize the resource based on the result of the second query; monitoring utilization of the resource; determining, based on the monitored utilization of the resource, whether the utilization of the resource that is in accordance with the request and in accordance with the resource allocation policy; and managing the utilization of the resource in accordance with the determination.