Designing the enterprise identity control plane — Entra ID, Privileged Identity Management, and Conditional Access at scale for regulated environments.