Abstract
As more data are stored in clouds, the demand to protect sensitive data against unauthorized access is increased. However, a failure to do so will limit the evolution of cloud computing. In this work, we address this issue by introducing a privacy aware model for authorization as a service to protect the confidentiality of data, along with an access control policy. We solve the authorization conflicts and inconsistencies and support more complex policies, which are usually required in real applications.