1. A method of controlling access to an information technology (IT) resource, the method comprising the steps of: a computer initiating a display including a visual representation of the IT resource and a visual representation of a first entity; the computer detecting in the display a first movement of the visual representation of the first entity from outside a boundary of the visual representation of the IT resource to a first position close to the boundary of the visual representation of the IT resource; responsive to the step of detecting the first movement to the first position close to the boundary, the computer determining a first attribute assigned to the visual representation of the first entity satisfies an access control requirement assigned to the visual representation of the IT resource; based on the first attribute assigned to the visual representation of the first entity satisfying the access control requirement assigned to the visual representation of the IT resource, the computer determining the first entity is permitted to access the IT resource; based on the first entity being permitted to access the IT resource, the computer permitting in the display a movement of the visual representation of the first entity across the boundary of the visual representation of the IT resource and permitting in the display a placement of the visual representation of the first entity within the boundary of the visual representation of the IT resource; the computer initiating the display including a visual representation of a second entity; the computer detecting in the display a second movement of the visual representation of the second entity from outside the boundary of the visual representation of the IT resource to a second position close to the boundary of the visual representation of the IT resource; responsive to the step of detecting the second movement to the second position close to the boundary, the computer determining a second attribute assigned to the visual representation of the second entity does not satisfy the access control requirement assigned to the visual representation of the IT resource; based on the second attribute assigned to the visual representation of the second entity not satisfying the access control requirement assigned to the visual representation of the IT resource, the computer determining the second entity is not permitted to access the IT resource; and based on the second entity being not permitted to access the IT resource, the computer presenting in the display a visual cue that indicates the visual representation of the second entity is prevented in the display from (1) moving across the boundary of the visual representation of the IT resource and (2) being placed within the boundary of the visual representation of the IT resource.