Proposal for Fast-TrackingNIST Role-Based Access Control Standard

Lots of users and privileges scattered over many platforms and applications. Who are the valid users? What are they entitled to access?How do you keep access rights up-to-date? How do you specify and enforce policy?