SECURITY AUTHORIZATION MANAGER
Windows Server 2003 includes a roles-based model for authorization designed to simplify administration and development of business process applications. These new functions are available from a MMC snap-in called Authorization Manager. To make the assignment of security more user-friendly and logical, the Authorization Manager permits the definition of common tasks and assignment of tasks to a user's real-life role. For example, managers at certain levels will be authorized according to their positions. The rules can also be associated with scope of responsibility. Access policy is specified, adjusted, and queried within a scope. This should eliminate the need to look at each object in order to ascertain the policy. This feature complements the access control list.