Enabling Zero Trust With One Identity Safeguard And Active Roles