Patent attributes
A system includes a plurality of shared network resources and a central server connected by a network. The central server receives from a first user a request for accessing a network resource. The central server identifies a plurality of user groups the first user is part of and determines a number of other users from the identified user groups who have the closest association with the first user. For each closely associated user of the first user, the central server simulates access to the requested network resource by the respective user based on a user group that provides to the other user access to the network resource. Based on results of the simulating, the central server determines a user group that provides a closest network path to the network resource and generates a recommendation to add the first user to the determined user group.