

Federated computing environments expose lots of resources in order to serve their users, which include system services, domain-specific services, and distributed file systems. A flexible and coordinated mechanism to control access to these resources is required which allows participants to form themselves into groups and secure access is granted to group members. Then, the participants can make resources available to a named collaborative group and manage locally the members in the group with required permissions across multiple domains.