My practical working standard for configuring, auditing, and governing machine identities alongside wider Entra control plane tools and policies