We have 4 servers in a managed datacenter (including 2 local Domain Controllers) to host our web applications. Our 20 person office uses Azure AD.
Engineers/DevOps access our servers via RDP (using separate credentials). They also access SQL Server using SQL authentication which is restricted at the firewall to the office static IP address.
Would you recommend we keep the office & servers completely separate from each other and manage two sets of credentials? Or would it be wise to connect Azure AD to the on-premise AD?