Abstract: Various methods, apparatuses, and media for implementing a machine-learning model execution module are provided. A processor is configured to generate a machine-learning model. The machine learning model includes data related to a requester's access to one or more ephemeral roles. The processor receives a request from the requester to access the one or more ephemeral roles within the machine-learning model. The processor also determines the requester's group or role membership status within an organization. The processor also dynamically evaluates the received request with the machine learning model in real time to grant or deny access to the one or more ephemeral roles based on the membership status of the requester.

Abstract: A method for validating an access request with respect to an application is provided. The method includes: receiving an access request from a user with respect to an application; retrieving, from a memory, group identification information that relates to at least one group to which the user belongs; retrieving, from the memory, scope information that indicates qualifications and/or characteristics of a relationship between the user and the at least one group; and generating a token that notifies the application of the group identification information and the scope information, and is usable by the application for validating the access request. The method may be implemented in an Active Directory Federation Services (AD FS) environment.

Abstract: Various methods, apparatuses, and media for implementing a machine-learning model execution module are provided. A processor is configured to generate a machine-learning model. The machine learning model includes data related to a requester's access to one or more ephemeral roles. The processor receives a request from the requester to access the one or more ephemeral roles within the machine-learning model. The processor also determines the requester's group or role membership status within an organization. The processor also dynamically evaluates the received request with the machine learning model in real time to grant or deny access to the one or more ephemeral roles based on the membership status of the requester.