ACCESS CONTROL USING SOCIAL NETWORK ASSOCIATIONS

The disclosure includes a system and method for performing access control. The system includes a controller, an authentication module and a permission module. The controller receives an access request from a first user. The access request indicates a request to access a cloud-based service managed by a second user. The authentication module authenticates the first user. The permission module determines a first social network association that exists between the first user and the second user based at least in part on a social graph and determines whether access to the cloud-based service is permitted for the first social network association based at least in part on an access setting of the cloud-based service. Responsive to determining that the access is permitted for the first social network association, the permission module generates access permission data to permit the first user to access the cloud-based service.