1. A method comprising: receiving, by an access control system, a service request for at least one managed computer system from an entity, the entity having an access right for requesting the received service request of the managed computer system; subsequent to the service request receiving a primary authorization, determining dynamically, according to a context of the managed computer system and an authorization profile for the received service request, by the access control system that the service request requires secondary authorization, the authorization profile for the received service request being retrieved from at least one knowledge system associated with the managed computer system; sending, by the access control system and based upon the determination, the service request and a secondary authorization request to a secondary authorization management system; resolving, by the secondary authorization management system, the secondary authorization request; returning, by the secondary authorization management system, a resolution of the secondary authorization request to the access control system; logging the context for the managed computer system, the service request, a secondary authorization result, and a service request result; identifying a pattern and adding the pattern to the at least one knowledge system with the secondary authorization result; and determining whether to provide the secondary authorization result in response to a secondary authorization request for another received service request based upon a comparison with the identified pattern.