Systems and methods for role-based computer security configurations

An apparatus, comprising:

• a processor;
• and
• a memory operatively coupled to the processor, the processor configured to:
• detect at least one of:
• a software application installed on a client computing device, or
• usage data associated with a current user of the client computing device and associated with the software application;
• identify, based on the at least one of the software application installed on the client computing device or the usage data, a user role for the current user of the client computing device;
• predict, based on the user role for the current user of the client computing device, an expected behavior of the current user of the client computing device;
• apply, based on the expected behavior, a privilege level for the current user to the client computing device, the privilege level being associated with the software application;
• send an identifier of the user role to an administrative server for storage in an Active Directory (AD) database;
• identify a security risk based on the user role and the usage data for the current user;
• and
• responsive to detection of deviation from the expected behavior that is indicative of the security risk, automatically select and implement a mitigation technique configured to adjust the privilege level.