Based on revocation symmetric administrative model of the delegation role-base access control

A symmetric administrative model for delegation and revocation based on a profile delegation structure is discussed in the paper. It is grouped users in groups,permissions in roles. Role-group,group-group and role-group assignments are proposed for delegation and revocations in a symmetric model. The profile delegation is used for revoke a delegation. The profile delegation manages the path delegation and revocation in the model. The profile is a powerful tool for the administrator to know exactly how was done a delegation and the shows the way to revoke a role,a group,or simply a function or user in the whole system.