Understanding Microsoft PIM (Privileged Identity Management) | Azure AD

[@mihirtrivedi9832]

Nice video @Imperion. Can you use Entra PIM to manage Owner, Contributor role assigned to AD synced group

[@imperionllc]

Yes you can and should. Entra groups have to be cloud only but a little graph magic can sync an on prem group easy enough. If you can avoid that though and go cloud native, use access packages to grant roles.

[@YouKayTen]

Thanks for this. Brilliant for Admin roles. Is there a way we could leverage PIM to delegate access on behald of another user as a role? E.g. EA on behalf of CEO? (or anything else within Microsoft universe)?

[@imperionllc]

No but you could make the CEO the approver for a role

[@YouKayTen]

@@imperionllc what role would the CEO approve? Its access to their own account.

[@simple-security]

How can you use PIM with Purview roles?

[@imperionllc]

Not natively supported the last time I checked. Only the Entra compliance admin.

[@simple-security]

@@imperionllc straight up answer, thanks!!!

[@imperionllc]

@@simple-security you're welcome!

[@simple-security]

@@imperionllc figured it out. In azure add users to a group. In Purview add the groups to each role. And just control the azure group with pim.

[@imperionllc]

@simple-security I like it!

[@michaeldawn442]

I just wanted to let you know that I really could not follow you, because your screen using black made it almost impossible to see your screen very well....

[@imperionllc]

Ok so go watch a video in white mode?

[@thepuldarshana9056]

the way of pronounce is hard to understand please speak clearly