1. A method comprising: providing in a computer, a role based access control (RBAC) store, the RBAC store defining at least one scope wherein each scope represents a set of resources in a networked computing environment; providing in the RBAC store, at least one role definition and at least one role assignment; defining in the RBAC store, based at least in part on the at least one role definition and the at least one role assignment, at least one enterprise role, each enterprise role including a set of permissions that are assigned to principals in a given scope; and using the RBAC store for translating the at least one scope, the at least one enterprise role and at least one resource group representing a role based access control (RBAC) policy to a resource authorization policy model, the RBAC policy mappable to at least one access control list (ACL) in the networked computing environment for configuring an underlying resource authorization policy.
20. The method of claim 1 , wherein the RBAC store is operative to implement resource authorization policy between the set of resources and an identity management system, the identity management system comprising the at least one resource group.