Network system and method for providing an ad-hoc access environment. A network system capable of providing an ad-hoc access environment comprises a controller unit connected to the network for receiving access requests from a device; and an authority unit for providing an authorization assertion to the controller unit; wherein the controller unit carries out an authorization process based on an access control policy including at least one rule based on which the controller unit contacts the authority unit and the authority unit provides an authorization assertion.