How do you approach implementing the principle of least privilege within a multi-tenant Active Directory environment?
