How would you conduct an audit of RE/MAX Active Directory to ensure the principle of least privilege is being enforced?