Implementations of the present disclosure relate to methods, systems, and computer program products for permission management. In one implementation, a computer-implemented method is disclosed. In the method, a permission score may be determined for a user in response to an operation requested to a target system by the user. Whether to permit the operation may be determined based on the permission score. Here, the permission score may be determined based on an identity component of the user and at least one of following components of the user: a state component, and an environment component. In other implementations, a computer-implemented system and a computer program product for permission management are disclosed.