1. A method comprising: defining a global system access control list (SACL) for a resource that includes a plurality of objects; and distributing a group policy that contains the global SACL, such that one or more processors associated with the resource, in response to an attempt to access to a particular said object, merges the global SACL with an object SACL for the particular said object to audit the attempt to access the particular said object.