Patent Document ID: 8381306
Application ID: 11443638

Base Claim:
1. A method comprising: providing in a computer, a role based access control (RBAC) store, the RBAC store defining at least one scope wherein each scope represents a set of resources in a networked computing environment; providing in the RBAC store, at least one role definition and at least one role assignment; defining in the RBAC store, based at least in part on the at least one role definition and the at least one role assignment, at least one enterprise role, each enterprise role including a set of permissions that are assigned to principals in a given scope; and using the RBAC store for translating the at least one scope, the at least one enterprise role and at least one resource group representing a role based access control (RBAC) policy to a resource authorization policy model, the RBAC policy mappable to at least one access control list (ACL) in the networked computing environment for configuring an underlying resource authorization policy.

---

Claim 18:
18. The method of claim 1 , wherein the role definition is defined at least in part, by an access mask associated with the set of resources.