Best practices for Power Automate with service account

We had a colleague leave who had their work email address and account connected to MANY Power Automate flows, SharePoint, OneDrive, Forms, Excel, etc.

We are looking to create a recommendation / best practices for a single account that will be used by the I.T. department for use in Power Automate, etc.

We will have colleagues in the I.T. department have access to SharePoint sites (maybe a security issue? do we EACH get our OWN accounts then?) and Power Automate

We'd have to have it setup as an email enabled account so we'd have to pay instead of a service account.  

Other thoughts?