Practical identity and access management for SMBs: roles, MFA, offboarding, service accounts, and governance without excessive bureaucracy.