Common Entra ID Security Assessment Findings – Part 3: Weak Privileged Identity Management Configuration