1. An information processor comprising: a configuration management database that stores resources, personnel, processes, and privileges provided on the resources, as configuration items, respectively, wherein the configuration management database prescribes relations between the configuration items including a privilege-dependency relationship between a privilege configuration item on a resource and another privilege configuration item on another resource required to exercise the privilege configuration item on the resource, a privilege-request relationship between a process configuration item and a privilege configuration item required for the process configuration item, and a privilege-giving relationship between certain of the personnel and a privilege given to the certain of the personnel; a privilege deriving unit that accesses the configuration management database, responsive to a process being assigned to corresponding personnel, to derive a goal state of a privilege on a resource that is required for the process and is to be given to the corresponding personnel by accessing in the configuration management database a given privilege-request relationship for the process; and a dependence relation definition unit that defines another privilege-dependency relationship that is made between a privilege on an existing resource and a privilege on another resource according to a condition associated with the existing resource, and prescribes how the existing resource is related to the another resource, when the another resource is associated with the existing resource.