Vasil Michev explores how you can mitigate threats and scope down permissions using application access policies in Exchange Online