Providing security with dynamic privilege level assignment in a hybrid-cloud stack

Abstract

Security with dynamic privilege level assignment in a hybrid-cloud stack is provided. A request associated with a user is received. For the request, a mapping and an authority structure are retrieved, where the mapping identifies a plurality of services and the authority structure identifies requisite privilege levels of the plurality of services. For the user, an allowed privilege range is retrieved. A current privilege level is set to a minimum privilege level of the allowed privilege range. A requisite privilege level for the request is determined based on the requisite privilege levels of the plurality of services. In response to determining that the current privilege level is less than the requisite privilege level for the request, the current privilege level is escalated based on the allowed privilege range and the requisite privilege level for the request, and the request is processed using the escalated privilege level.