1. A method for authoring role based access control policy in a networked computing environment, comprising: defining at least one scope wherein each scope represents a set of resources in the networked computing environment; defining at least one application role, each including a set of permissions that are assigned to principals in a given scope; and defining at least one resource group of principals in an organizational identity management system, wherein each of the members of the at least one resource group is designated for access to specific resources according to a scope of the at least one scope and an application role of the at least one application role.