1. A method comprising: building, at a target computing system controlling access to a resource, a context of a principal independently of the principal requesting access to the resource, the context including an authenticated identifier of the principal and one or more attributes associated with the principal; and applying, at the target system and independently of the principal requesting access to the resource, an authorization policy to the context; determining, at the target system based on the applying, whether the principal is permitted to access the resource; providing, based on the determining, an indication of whether the principal is permitted to access the resource; modifying the context; applying, at the target system, the authorization policy to the modified context; determining, at the target system based on the applying of the authorization policy to the modified context, whether a principal having the modified context is permitted to access the resource; and providing, to an administrator and based on the determining of whether a principal having the modified context is permitted to access the resource, an indication of whether the principal having the modified context is permitted to access the resource.