This talk will be a discussion of the recent standards development activities of the International Committee on IT Standards (INCITS) Role-Based Access Control working group. The context of this discussion will be on challenges in designing and implementing robust Identity and Access Management solutions in small scale and enterprise IT environments.