A method and apparatus for authorizing an access requester to access a
data communication network is provided. A determination is made that a
threshold access control server cannot process an access request
associated with the access requester. Access requester history data, or
data that describes the access history for an access requester, is
analyzed to obtain a threshold access level. A threshold access level is
an expression of how likely that a particular access requester is a
legitimate access requester. A session profile is selected for the access
requester based on the threshold access level. The session profile
indicates one or more actions the access requester is authorized to
perform in the network. The session profile may subsequently be
transmitted to the access requester to allow the access requester access
to the network to the extent appropriate in view of the access requester
history data.