We should quickly make a set of basic but efficient rules on AzureAD and Office365 environments as it is used more and more by companies.