1. A computer program product to be used in administrating user access to data, the computer program product being tangibly embodied in a machine-readable storage device and comprising: rules establishing authorizations to data in a computer system, each of the rules to authorize a subject to perform an action on data; and an activation function usable by an administrator to selectively indicate whether at least one of the rules is to be applied against a user seeking to perform an action on any of the data, wherein the activation function is to use a first type of graphical indication to graphically indicate that an attribute associated with a first rule cannot be evaluated, and to use a second type of graphical indication to graphically indicate that the first rule will be applied against the user in a case that the attribute can be evaluated, and wherein the activation function is to use a third type of graphical indication to graphically indicate that an attribute associated with a second rule can be evaluated, and to use a fourth type of graphical indication to graphically indicate that the second rule will be applied against the user.