Access Control Administration with Adjustable Decentralization