When designing solutions to mitigate ransomware attacks, how would you prioritize business continuity and disaster recovery (BCDR) alongside privileged access management? Provide a detailed strategy that includes the use of Microsoft Identity and Access Management solutions.