Written by ilgrosso
Apache Syncope user mailing list has been recently discussing about "virtual resources", e.g. resources to be used like as 'marker' for users and / or roles.
Even though this aspect will be probably part of the process of adding access management features to Apache Syncope (and SYNCOPE-167 in particular), most of it could be easily implemented in current stable release (1.0.2-incubating at the time of writing), and only by empowering some configuration.
I've created a proof-of-concept on Github - just grab it and give it a ride: more information at project's README.
Enjoy!