Your organization uses Microsoft Defender for Cloud Apps. Users have been consenting to third-party OAuth applications that request broad Microsoft 365 permissions such as full mailbox access and file read/write. Security wants an automated way to detect and immediately revoke consent for OAuth apps that were granted high-privilege permissions by a small number of users or that match risky patterns, without manually reviewing each app. What should you implement?