While cloud platforms like Office 365 and Azure AD may not be the first areas that manufacturing thinks of to defend, these are still part of the larger attack surface that attackers will exploit. Are you aware when sensitive information is shared with an outside party or when privilege is escalated within your Microsoft cloud?
