Dynamically associating attribute values with objects

1. A computer-readable storage medium coupled to a computing device including executable instructions which, when executed, manage information by:

defining a number of groups associated with a computer environment, wherein one or more of the number of groups includes a group member according to a group membership determination;

defining a number of attribute-value sets for each group, each attribute-value set being associated with a policy;

associating a first precedence parameter and a first attribute-value set with a first group;

associating a second precedence parameter and a second attribute-value set with a second group;

associating a third precedence parameter and a third attribute-value set with a third group;

using a number of precedence-based rules and precedence parameters to resolve a plurality of attribute-value sets when a user belongs to multiple groups including sorting the plurality of attribute-value sets using associated precedence parameters; and,

dynamically assigning a resultant set of attribute-values including a first value associated with a first attribute-value pair and a second value associated with a second attribute-value pair to a user object associated with the computer-implemented environment when more than one attribute-value set is associated with the user object including determining which of the more than one attribute-value sets corresponds with the resultant attribute-value set based at least in part on an associated precedence parameter and the number of precedence-based rules, otherwise assigning a default policy to the user object.

2. The computer-readable storage medium of claim 1 , wherein defining a number of attribute-value sets includes representing one or more attribute-values sets with one or more password setting objects (PSO), wherein each PSO includes a first password attribute-value set and a second password attribute-value set and using the precedence parameters in part to implement a password policy to a user included in multiple groups including a first type of user group and a second type of user group, wherein a higher precedence parameter is associated with the first type of user group.

3. The computer-readable storage medium of claim 2 , wherein the instructions, when executed, manage information by selecting a resultant attribute-value set based at least in part on a precedence number and the group membership determination, wherein the resultant attribute-value set includes a PSO having a password length attribute-value pair, a password expiration attribute-value pair, and a complexity attribute-value pair.

4. The computer-readable storage medium of claim 1 , wherein the instructions, when executed, manage information by implementing a password policy using a PSO which corresponds with a password attribute and a password value set including a complexity attribute and an associated value.

5. The computer-readable storage medium of claim 1 , wherein sorting the plurality of attribute-value sets includes sorting the attribute-value set in a numerical order based on a value of the associated precedence parameter.

6. The computer-readable storage medium of claim 5 , wherein determining which attribute-value set corresponds with the resultant attribute-value set includes selecting the resultant attribute-value set from the plurality of attribute-value sets, wherein the resultant attribute-value set corresponds to a minimum precedence number.

7. The computer-readable storage medium of claim 1 , further comprising, determining a global group membership if no attribute-value set is applied to the user object and obtaining applicable attribute-value sets based on the global group membership, sorting the applicable attribute-value sets in order of precedence, wherein the attribute-value set with the highest precedence parameter is the resultant attribute-value set.

8. The computer-readable storage medium of claim 5 , wherein determining which attribute-value set corresponds with the resultant attribute-value set includes selecting the resultant attribute-value set from the plurality of attribute-value sets, wherein the resultant attribute-value set corresponds to a maximum precedence number.

9. The computer-readable storage medium of claim 1 , wherein defining a number of attribute-value sets includes defining the attribute-value sets as corresponding to a defined password policy, wherein each attribute-value set includes a password attribute and a password attribute value.

10. The computer-readable storage medium of claim 9 , wherein defining a number of attribute-value sets includes defining each password attribute to correspond with characteristics of a password.

11. The computer-readable storage medium of claim 10 , wherein defining a number of attribute-value sets includes defining a first attribute of a first attribute-value set as a password character limitation, and defining a second attribute of a second attribute-value set as a password expiration period.

12. The computer-readable storage medium of claim 1 , wherein the instructions, when executed, manage information by ensuring that a password is in accord with a password policy by determining whether a password value associated with a password attribute is in accord with a defined password attribute-value set.

13. A computer system to manage information comprising:

a database component including a number of groups and objects; and

a directory component configured to dynamically assign one or more attribute-values associated with an attribute-value set to an object, wherein the directory component is configured to:

associate a precedence parameter with each attribute-value set including a first precedence parameter and a first attribute-value set of a first group, a second precedence parameter and a second attribute-value set of a second group, and a third precedence parameter and a third attribute-value set of a third group;

determine whether each attribute-value set is associated with one or more groups;

use a number of precedence-based rules and precedence parameters to resolve a plurality of attribute-value sets when the object is associated with multiple groups, the number of precedence-based rules used to determine which attribute-value set to associate with a user object as part of resolving attribute-value sets and password policies for each user object;

sort a plurality of attribute-value sets using associated precedence parameters when more than one attribute-value set is associated with the one or more groups; and

select a resultant set of attribute-values including a first value associated with a first attribute-value pair and a second value associated with a second attribute-value pair to be associated with a user when more than one attribute-value set is associated with the user object including determining which of the more than one attribute-value sets corresponds with the resultant attribute-value set based at least in part on using the associated precedence parameter and the number of precedence-based rules to determine the resultant attribute-value set.

14. The computer system of claim 13 , wherein the number of precedence-based rules includes a number of precedence-based conditions used to resolve attribute-value sets based at least in part on a numerical precedence evaluation.

15. The computer system of claim 13 , further comprising an operating system (OS), wherein the directory component is configured to operate with the OS.

16. A computer-implemented computing method of managing information comprising:

defining a number of groups, wherein one or more of the number of groups includes a group member;

defining a number of password setting objects (PSOs), wherein each PSO is associated with a password policy;

associating a precedence parameter with one or more of the PSOs, including associating a first precedence parameter and a first attribute-value set with a first group, associating a second precedence parameter and a second attribute-value set with a second group, associating a third precedence parameter and a third attribute-value set with a third group based in part on the one or more PSOs;

using a number of precedence-based rules and precedence parameters to resolve attribute-value sets for multiple groups including sorting the attribute-value sets using associated precedence parameters; and

selecting a resultant PSO including a first value associated with a first attribute-value pair and a second value associated with a second attribute-value pair for an associated group member when more than one PSO is available including using an associated precedence parameter and the number of precedence-based rules to determine which PSO corresponds with the resultant PSO, otherwise selecting a default policy for the associated group member.

17. The method of claim 16 , wherein the organizing further comprises sorting the plurality of PSOs according to a defined order.

18. The method of claim 16 , further comprising assigning a default password having default characters and default expiration parameters to the group member absent any PSOs.