Apache Syncope user mailing list has been recently discussing about "virtual resources", e.g. resources to be used like as 'marker' for users and / or roles. Even though this aspect will be probably part of the process of adding access management features to Apache Syncope