1. A method of organizing permissions to authorize a subject to perform an action on an object in a cloud computing environment having a plurality of computing nodes, the method comprising: creating a plurality of permissions associated with a cloud customer; associating, a first set of permissions from the plurality of permissions with one or more objects, wherein each of the first set of permissions describes an action performed on an object; and associating a second set of permissions from the plurality of permissions with one or more users, wherein each of the second set of permissions describes an action to be performed by one or more users.