Microsoft Defender for Identity

In case you are concern about Security Best Practices, you may use Azure security baseline for Microsoft Defender for Identity, take a look at:
https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/defender-for-identity-security-baseline