An Identity and Access Management (IAM) framework for managing permissions across cloud infrastructure and critical apps