Managing approval workflows for privileged roles in private label cloud realms

One or more non-transitory computer readable media comprising instructions which, when executed by one or more hardware processors, cause performance of operations comprising:

• receiving a first activation request to activate a role container that has been assigned to a first set of one or more users, wherein the role container is in an inactive state for a first user of the set of one or more users prior to the first activation request, wherein the role container comprises a first role;
• wherein the first role in the role container is associated with a first permission to perform a first operation on a first resource;
• traversing a first activation workflow to activate the role container for the first user;
• in response to receiving a workflow response associated with the first activation workflow, activating the role container for the first user;
• wherein the first user does not have access rights to perform the first operation on the first resource based on the role container until the role container is activated for the first user.