https://msolenacrm.blog/2023/10/05/microsoft-entra-id-connector-least-privilege/