We recommend you only assign privileged roles to users that have a business justification. Regularly review your identity ...

We recommend you only assign privileged roles to users that have a business justification. Regularly review your identity system to make sure the requirements and configuration are up to date. Automate the regular reviews to simplify the process, and set the default to remove privileged access. It can always be granted again later if necessary.