Abstract: A system and method for method for providing access to a resource includes receiving, from a user device of a user, a request to access the resource and an access token, the access token identifying an access role associated with the user and the request identifying a task to be performed on the resource; retrieving the access role from the access token; examining a role-to-permissions map to identify one or more permission available for the access role; determining, based on the available permissions for the access role that the user is authorized to perform the task on the resource; determining, based on the access role and the available permissions that the user has permission to access the resource managed by an object model; and upon determining that the user is authorized to perform the task on the resource and the user has permission to access the resource managed by the object model, permitting the user device of the user to access the resource to perform the task.