1. An apparatus, comprising: a receiver to receive a request from a user process to access a resource; an object set, including at least a first object representing a user and a second object representing the resource; an authenticator to authenticate the user using the first object in the object set; a determiner to determine if there is a relationship between the first object and the second object in the object set; and a permission setter to set a permission level for the user process to use the resource according to the relationship, wherein the resource is an application to which certain users are to be granted administrative access based on information in the first object in the object set, dependent on the resource, and independent of a username or user ID (UID) associated with the first object in the object set.