For production use https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
