Activity based access control in heterogeneous environments

A system comprising:

• a computer processor for executing computer program instructions;
• and
• a non-transitory computer-readable storage medium storing computer program instructions executable by the processor to perform operations comprising:
• obtaining privilege data from a plurality of authorization systems authorizing access to a set of heterogeneous cloud-based services, the privilege data describing, for a user of the authorization systems, one or more of:
• monitored activities, behaviors, privileges, and derived information for privileges;
• transforming the privilege data to a common privilege information model, the common privilege information model normalizing the privilege data across the plurality of authorization systems;
• monitoring an activity of the user when accessing any of the plurality of authorization systems over a period of time;
• applying a security policy to the common privilege information model, the security policy determining adjustments to the privilege data in the common privilege information model based at least in part on the monitored activity;
• and
• dynamically adjusting the common privilege information model based on the applied security policy,
• wherein the adjustment to the common privilege information model comprises at least one of:
• a revocation of access to the user to a particular service of the plurality of authorization systems, and
• dynamically granting of access to the user to the particular service of the plurality of authorization systems.