Authorisation is determining what someone is permitted to do. It should not be confused with authentication, determining who someone is.
ARCS has a number of solutions for Authorisation, in the grid area, we use VOMS to create Virtual Organisations that individual users are members of.
ARCS also has a means, the Authtool, that allows people with existing logon accounts at Members of ARCS sites to map their Grid Credentials to that logon account. While this approach may be less flexable in the long term, its very easy and uses existing means to control permissions and quote.