A processing device includes processing circuitry and non-volatile storage configured to store management information that identifies supervisor-subordinate relationships among users. The processing circuitry receives a request from a first user, wherein the request includes a request to alter access rights of a second user to a network resource. The processing circuitry establishes authorization of the first user to request access to the network resource based on information included in a directory services database, and retrieves management information associated with the first user and the second user from the non-volatile storage. The processing circuitry determines whether a supervisor-subordinate relationship exists between the first user and the second user based on the management information associated with the first user and the second user, and alters the access rights of the second user to the network resource, at least partly in response to determining that the supervisor-subordinate relationship between the first user and the second user exists.