1. A method for managing user access to a plurality of network resources on an enterprise network from a wireless mobile device, by steps comprising: determining group membership of a user based on a user ID and attributes of the user, each group having associated therewith a set of resources and associated operations for members of the group; determining access rules for the user based on each group membership of the user; generating a list of accessible resources and associated operations for the user based on said access rules; making said list available to a subsequent process for performing an operation on an accessible resource in accordance with said access rules.