Dynamic trust domains (DTDs) are resource collections of servers and clients distributed over multiple policy domains. These DTDs often wish to define and enforce consistent policies over their underlying domain policies. But there are many problems in distributing the policy to the domains, and these domains may each have different capabilities for enforcing the policy. In this paper, we present a solution to this problem through the authorization service in dynamic trust domains (ASDTD).