1. A method comprising: defining one or more secured entities associated with an application; defining one or more functional abilities associated with one or more of said secured entities; defining one or more roles associated with said one or more functional abilities; and selectively authorizing a user to access at least a portion of said application based, at least in part, on a role associated with said user.