System and method for controlling authorization using a request authorization privilege model

An access authorization method to authorize access to electronic resources in a computing environment, the method comprising:

• configuring a memory with references to protected resources hosted by a resource server, authorization policies related to the protected resources, and assignments of users and services to the authorization policies, the authorization policies comprising client authorization policies for authorizing access by services executing in a cloud-based platform and user authorization policies for authorizing access by users of the cloud-based platform;
• receiving a request from an application for authorization to access a first protected resource hosted by the resource server;
• and
• based on a determination that the request is to access the first protected resource on behalf of a service, determining whether to authorize the request according to the client authorization policies.

An access authorization method to authorize access to electronic resources in a computing environment, the method comprising:

• configuring a memory with references to protected resources hosted by a resource server, authorization policies related to the protected resources, and assignments of users and services to the authorization policies, the authorization policies comprising client authorization policies for authorizing access by services executing in a cloud-based platform and user authorization policies for authorizing access by users of the cloud-based platform;
• receiving a request from an application for authorization to access a first protected resource hosted by the resource server;
• and
• based on a determination that the request is to access the first protected resource on behalf of a user, determining whether to authorize the request according to the user authorization policies.