Comment by aNoob7000

If anyone has a good book on setting up a good authorization model in a corporate environment, please pass it along.