Authorization Manager (or AzMan) is the authorization API built into Windows Server. It provides RBAC AccessChecks to application developers for free and supported by the Windows team. You can use Windows Groups or LDAP queries to assign membership to the role. AzMan supports a centralized or distributed store using Active Directory, ADAM, or XML. For more information on AzMan, check out Role-Based Access Control for Multi-tier Applications Using Authorization Manager.