An Identity-Centric Approach to Privilege Management in the Cloud