What is best way to controll network access?

Hello, I’m new to MT. In my network i use Mikrotik router as gateway, some L2 and L3 switches, few map + ubi AP and two s2s ipec vpn tunnels. How do you guys control endpoint PC and control their access to network what is actually best practise(ACL,pppoe,dot1x?). Can you share any solutions?