1. A computer implemented process, responsive to an entity attempting to access a resource in a data repository, initiates a view processor component of IBM's WEBSPHERE Virtual Member Manager, wherein the view processor performs steps comprising: retrieving a delegated administration path describing a location of a resource in a custom organizational hierarchy; identifying a security policy for the resource; identifying a security policy for an entity attempting to access the resource; applying both the security policy for the entity attempting to access the resource to the delegated administration path and the security policy for the resource so that the delegated administration path describes a location of the entity attempting to access the resource in the custom organizational hierarchy and also contains the security policy for the entity attempting to access the resource; and sending the delegated administration path with both the applied security policies to an authorization engine, so that access to the resource can be granted or denied.