A method for managing a cloud computing system, capable of allocating computing and network resources to a plurality of clients, each client being associated with at least one user likely to access the computing and network resources allocated to the client by the cloud computing system. This method includes, for at least one client of the cloud computing system: providing to the client a meta-model having a plurality of elements defining an access control model and an access control policy for the client; receiving an instance of the meta-model provided by the client, this instance defining, for the client, an access control model and an access control policy based on this access control model; and applying the access control policy to control an access of a user of the client to at least one resource allocated to the client by the cloud computing system.