A method that allows authorization to be externalized from applications, for example by providing an authorization plug-in. This allows developers to avoid expense and trade-offs of creating custom access control. OTB Authorization solutions can provide full-featured authorization that includes a complete RBAC model, policy storage, user interface, built-in applicaiton gorup support, rule and query support, integrated system auditing, and performance optimization.