CAS - Community Authorization Service

Building on GSI, the CAS component of the Globus Toolkit allows resource providers to specify coarse-grained access control policies in terms of communities as a whole, delegating fine-grained access control policy management to the community itself.

Resource providers maintain ultimate authority over their resources (including per-user control and auditing) but are spared most day-to-day policy administration tasks (e.g., adding and deleting users in groups, modifying user privileges).