Abstract: A method of managing access to a network resource is provided. An access query generated by a user requesting access to one of a group of resources is received. In response, a directory schema is used to determine the privileges assigned to the user for accessing the resource. The directory schema includes an association object associating user objects representing multiple users, a resource group object representing the group of resources, and privilege objects representing privileges of users for accessing each of the group of resources such that the association defines the privileges of various users for accessing the group of resources.

Abstract: Information handling system access to a network product, such as a predetermined application, function or information, is controlled by a server administrator associated with the product and a privilege directory associated with the network. The privilege directory has plural association objects, each association object tied to one or more users or group of users and a single privilege. On receipt of a request from a user to access a product, the server administrator queries the privilege directory to determine all association objects tied to the requesting user and determines if a privilege to access the product is tied to an association object having the requesting user.