Also if you're still invested in Active Directory and you have not started your journey of transforming identities to cloud native, please see this doc on Microsoft Learn about the five stages of grief five stages of transformation (https://learn.microsoft.com/en-us/entra/architecture/road-to-the-cloud-posture#five-states-of-transformation), and give serious consideration to advancing your organization through these stages of transforming identities:
Road to the cloud - Determine cloud transformation posture when moving identity and access management from Active Directory to Microsoft Entra ID - Microsoft Entra

Determine your cloud transformation posture when planning your migration of IAM from Active Directory to Microsoft Entra ID.