1. A method for extending and grouping actions and permissions for authorization of a requesting user to access or use a requested protected system resource in a computer system, said method comprising the steps of: providing an access control policy associated with said requested protected system resource, said access control policy containing a permission list of permitted identities for use of said protected system resource, said permission list containing at least one action group tag and associated action indicators; evaluating said permission list according to a specific permission definition associated with said action group tag, said permission definition providing a correlation between permissible actions and members of a set of action indicators; and granting authorization to perform actions on said requested protected system resource to said requesting user if said access control policy permission list includes an appropriate action indicator correlated to an action group tag.