主权项 |
1. A computer-implemented method of provisioning access rights to physical computing resources comprising:
receiving an access request at an access request handler; identifying, at the access request handler, a set of logical permissions based, at least in part, on the access request; deriving, at the access request handler, a set of logical entitlements based, at least in part, on the set of logical permissions; translating, at an entitlement translator, the set of logical entitlements to a physical entitlement specification based, at least in part, on a set of physical permission specifications respectively associated with the set of logical permissions; and provisioning, using an access control manager, access rights to at least one physical computing resource indicated in the physical entitlement specification. |