The Cybersecurity and Infrastructure Security Agency (CISA) and National Security Agency (NSA) has released access management best practices.
https://www.securitymagazine.com/articles/99109-security-leaders-discuss-cisa-access-management-best-practices