Patent ID: 8627066

Claim:
A method for execution by one or more processing devices of one or more computers of a dispersed storage network, the method comprises: receiving, by the one or more processing device of one or more computers, a dispersed storage network (DSN) access request that includes a requester identifier (ID), wherein the requester ID is associated with a certificate chain; when the certificate chain is valid, accessing registry information for the DSN, wherein the registry information includes a plurality of access control lists, wherein an access control list of the plurality of access control lists includes a plurality of entries, and wherein an entry of the plurality of entries includes a realm ID, a subject name ID, and a set of permissions; identifying one of the plurality of access control lists based on at least one of information associated with the requester ID and information associated with the certificate chain; identifying one or more entries of the one of the plurality of access control lists based on the information associated with the certificate chain to produce one or more identified entries; and generating, for the DSN access request, permissions from one or more sets of permissions associated with the one or more identified entries.