What privileged access management practices would you recommend?

You can always do more, learn where you should focus, including two-factor authentication, role-based access and more.