1. A computing device for provisioning access rights to physical computing resources comprising: one or more processors; and memory storing computer-executable instructions that, when executed by one of the one or more processors, cause the computing device to receive a request to provision one or more access rights for a user account, the request specifying a business activity; identify a set of logical permissions based, at least in part, on the request by obtaining a set of business tasks associated with the business activity and identifying, as the set of logical permissions, one or more logical permissions respectively associated with individual business tasks in the set of business tasks; derive a set of logical entitlements based, at least in part, on the set of logical permissions; translate the set of logical entitlements to a physical entitlement specification based, at least in part, on a set of physical permission specifications wherein each physical permission specification in the set of physical permission specifications is associated with one of the logical permissions in the set of logical permissions; and provision one or more access rights for the user account to at least one physical computing resource indicated in the physical entitlement specification.