Various embodiments of systems and methods for providing an expression of a resource for access control are described herein. One or more business security profiles associated with a user are received. The business security profile is defined including a resource expression. The resource expression can include a resource expression with a quantifier or the resource expression without a quantifier. Further, a net profile of the user is computed using symbolic calculus on the resource expression of the one or more business security profiles. The net profile of the user includes a set of granted resources and a set of denied resources. Based upon the computed net profile, access to a resource is authorized for the user.