A method may include receiving an event notification that a user identifier has been added to a project identifier in a database, the user identifier associated with resource access rights for a plurality of resources; querying a datastore for a first resource access patterns associated with the user identifier and the project identifier for a first period of time; inputting the first resource access patterns into a machine learning model; receiving an output from the machine learning model identifying a cluster identifier associated with user identifiers with similar access patterns as the first resource access patterns; and based on the output, modifying the resource access rights for the user identifier with respect to the project identifier