From the course: Azure for Architects: Security and Identity Management with Microsoft Entra
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Microsoft Entra Privileged Identity Management
From the course: Azure for Architects: Security and Identity Management with Microsoft Entra
Microsoft Entra Privileged Identity Management
- [Instructor] Let's say that you want to give permissions only for a little while, just so somebody can perform their task. Well, Microsoft Entra Privileged Identity Management, sometimes called PIM, PIM, is your solution for that. You provide just-in-time privileged access to resources and it is time-bound. They don't necessarily always have this role or permission structure while they're in. It just cuts off after a certain amount of time. You can require approval to activate the privileged roles and you get notification when they're activated. So if this says anything, it's about control over those privileged access roles. Now, this is how it works. You make PIM available. The user activates the PIM role. The user completes whatever they're supposed to do inside of there, and then the role disappears. There's a couple different recommendations that we have for this. You need to identify and manage users assigned to administrative roles. Remove the unused or excessive privileged…