https://docs.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-management-configure
Last Checked: Dec 07, 2023, 18:55 EST
| IP Address: | 104.100.71.118 |
| ASN #: | AS16625 AKAMAI-AS, US |
| Location: | Santa Clara, California, US |
| URL Reputation: |
|
Other submissions on 104.100.71.118:
No other submissions on this IP address.
Other submissions on microsoft.com:
-
https://dialin.teams.microsoft.com/f4116419-faf1-4d2b-a70d-a4352b01c569?id=892942375/
-
http://go.microsoft.com/
-
https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c245
-
http://tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/28edaebf-8019-4844-ba32-8ab019bc9391?P1=1701390240&P2=404&P3=2&P4=i/F8MYBZQoXQetyAsw5FtqWqeyf5Keap7jWlGkzP3eBI5oFQaItgYmvGpUBMgeP6dVtvt7sM/kb3pv76B2fx1g%3D%3D
-
http://DefenderCloudnoreply@microsoft.com/
-
https://krs.microsoft.com/redirect
-
http://azure@email.microsoft.com/
-
http://go.microsoft.com/fwlink/p/?LinkId=255141
-
https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=MvfeEE5D2U-ilNmyXfBcvVQ_-PfHIutFuRG8PcToAiFUOElJRVczSFBMUDBSNjdCV1hWTzZYMjNOMi4u
-
https://urlshortener-emea.teams.microsoft.com/8DAC615DC3E1AFA-2-1
Previous checks:
No previous checks.
-
GET200 OK
https://yt3.ggpht.com/ytc/APkrFKb0SOZ-yWKky8pJqG8wSyLgFNd6c_0nuST0UF6nhg=s68-c-k-c0x00ffffff-no-rj
- https://docs.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-management-configure https://learn.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-management-configure
- https://learn.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-management-configure /en-us/azure/active-directory/privileged-identity-management/pim-configure
- https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure /en-us/entra/id-governance/privileged-identity-management/pim-configure
- https://c1.microsoft.com/c.gif?DI=4050&did=1&t= https://c.bing.com/c.gif?DI=4050&did=1&t=&ctsa=mr&CtsSyncId=7074A2C5A3234F79A3EBD97F3C07DB81&RedC=c1.microsoft.com&MXFR=272CDB7ED5196E7918BDC89ED1196837
<html class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light" dir="ltr" data-css-variable-support="true" data-authenticated="false" data-auth-status-determined="true" data-target="docs" x-ms-format-detection="none" lang="en-us"><head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta property="og:title" content="What is Privileged Identity Management? - Microsoft Entra ID Governance">
<meta property="og:type" content="website">
<meta property="og:url" content="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure">
<meta property="og:description" content="Provides an overview of Microsoft Entra Privileged Identity Management (PIM).">
<meta property="og:image" content="https://learn.microsoft.com/en-us/media/open-graph-image.png">
<meta property="og:image:alt" content="Microsoft Learn">
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:site" content="@MicrosoftLearn">
<meta name="color-scheme" content="light dark">
<meta name="author" content="barclayn">
<meta name="breadcrumb_path" content="/entra/breadcrumb/toc.json">
<meta name="depot_name" content="MSDN.entra-docs">
<meta name="description" content="Provides an overview of Microsoft Entra Privileged Identity Management (PIM).">
<meta name="document_id" content="d7338196-8434-f76e-ec0d-15bc85d51434">
<meta name="document_version_independent_id" content="c7003b7a-91f8-3727-0f3e-93f52f5809fa">
<meta name="documentationcenter" content="">
<meta name="editor" content="">
<meta name="feedback_help_link_type" content="">
<meta name="feedback_help_link_url" content="">
<meta name="feedback_product_url" content="https://feedback.azure.com/d365community/forum/79b1327d-d925-ec11-b6e6-000d3a4f06a4">
<meta name="feedback_system" content="GitHub">
<meta name="git_commit_id" content="6185a92d801f72341fa3ea2b46a2f43936f37411">
<meta name="gitcommit" content="https://github.com/MicrosoftDocs/entra-docs-pr/blob/6185a92d801f72341fa3ea2b46a2f43936f37411/docs/id-governance/privileged-identity-management/pim-configure.md">
<meta name="locale" content="en-us">
<meta name="manager" content="amycolannino">
<meta name="ms.author" content="barclayn">
<meta name="ms.collection" content="M365-identity-device-management">
<meta name="ms.custom" content="pim,azuread-video-2020,contperf-fy21q3-portal, content-engagement">
<meta name="ms.date" content="10/26/2023">
<meta name="ms.reviewer" content="ilyal">
<meta name="ms.service" content="active-directory">
<meta name="ms.subservice" content="pim">
<meta name="ms.topic" content="overview">
<meta name="ms.workload" content="identity">
<meta name="original_content_git_url" content="https://github.com/MicrosoftDocs/entra-docs-pr/blob/live/docs/id-governance/privileged-identity-management/pim-configure.md">
<meta name="page_type" content="conceptual">
<meta name="schema" content="Conceptual">
<meta name="services" content="active-directory">
<meta name="site_name" content="Docs">
<meta name="toc_rel" content="toc.json">
<meta name="uhfHeaderId" content="MSDocsHeader-Entra">
<meta name="updated_at" content="2023-10-27 04:54 PM">
<meta name="word_count" content="1593">
<meta name="recommendation_types" content="Training">
<meta name="recommendation_types" content="Certification">
<meta name="persistent_id" content="7df81cdf-9920-f097-f254-8ad149a1df54">
<meta name="cmProducts" content="https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/1433a524-c01f-4b87-beab-670c040dea4f" data-source="generated">
<meta name="spProducts" content="https://microsoft-devrel.poolparty.biz/DevRelOfferingOntology/312f1f05-a431-4193-8a4d-e6245d5966de" data-source="generated">
<meta name="scope" content="M, i, c, r, o, s, o, f, t, , E, n, t, r, a">
<meta name="github_feedback_content_git_url" content="https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/id-governance/privileged-identity-management/pim-configure.md">
<link href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure" rel="canonical">
<title>What is Privileged Identity Management? - Microsoft Entra ID Governance | Microsoft Learn</title>
<link rel="stylesheet" href="/_themes/docs.theme/master/en-us/_themes/styles/706595c3.site-ltr.css ">
<script id="msdocs-script">
var msDocs = {
data: {
timeOrigin: Date.now(),
contentLocale: 'en-us',
contentDir: 'ltr',
userLocale: 'en-us',
userDir: 'ltr',
pageTemplate: 'Conceptual',
brand: 'entra',
context: {
},
hasBinaryRating: true,
hasGithubIssues: true,
feedbackHelpLinkType:'',
feedbackHelpLinkUrl:'',
standardFeedback: false,
showFeedbackReport: false,
enableTutorialFeedback: false,
contentWellNotification: '',
feedbackSystem: 'GitHub',
feedbackGitHubRepo: 'MicrosoftDocs/entra-docs',
feedbackProductUrl: 'https://feedback.azure.com/d365community/forum/79b1327d-d925-ec11-b6e6-000d3a4f06a4',
extendBreadcrumb: false,
isEditDisplayable: true,
hideViewSource: false,
hasPageActions: true,
hasPrintButton: true,
hasBookmark: true,
hasShare: true,
isPermissioned: false,
isPrivateUnauthorized: false,
hasRecommendations: true,
contributors: [
{ name: "barclayn", url: "https://github.com/barclayn" },
{ name: "BryanLa", url: "https://github.com/BryanLa" },
{ name: "alexbuckgit", url: "https://github.com/alexbuckgit" },
{ name: "v-dirichards", url: "https://github.com/v-dirichards" },
{ name: "billmath", url: "https://github.com/billmath" },
{ name: "MicrosoftGuyJFlo", url: "https://github.com/MicrosoftGuyJFlo" },
{ name: "amsliu", url: "https://github.com/amsliu" },
{ name: "NWolters2k", url: "https://github.com/NWolters2k" },
{ name: "yoelhor", url: "https://github.com/yoelhor" },
{ name: "TimShererWithAquent", url: "https://github.com/TimShererWithAquent" },
{ name: "jborsecnik", url: "https://github.com/jborsecnik" },
{ name: "ZaidAlKhayyat-MSFT", url: "https://github.com/ZaidAlKhayyat-MSFT" },
{ name: "curtand", url: "https://github.com/curtand" },
{ name: "rolyon", url: "https://github.com/rolyon" },
{ name: "jdmartinez36", url: "https://github.com/jdmartinez36" },
{ name: "Saisang", url: "https://github.com/Saisang" },
{ name: "v-kents", url: "https://github.com/v-kents" },
{ name: "nschonni", url: "https://github.com/nschonni" }
],
},
functions:{}
};
</script>
<script src="https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js"></script>
<script src="https://js.monitor.azure.com/scripts/c/ms.jsll-3.min.js"></script>
<script src="/_themes/docs.theme/master/en-us/_themes/global/67a45209.deprecation.js"></script>
<link rel="preconnect" href="//mscom.demdex.net" crossorigin="">
<link rel="dns-prefetch" href="//target.microsoft.com">
<link rel="dns-prefetch" href="//microsoftmscompoc.tt.omtrdc.net">
<link rel="preload" as="script" href="/static/third-party/adobe-target/at-js/2.9.0/at.js" integrity="sha384-1/viVM50hgc33O2gOgkWz3EjiD/Fy/ld1dKYXJRUyjNYVEjSUGcSN+iPiQF7e4cu" crossorigin="anonymous" id="adobe-target-script" type="application/javascript">
<script src="/_themes/docs.theme/master/en-us/_themes/scripts/1d1a3107.index-docs.js"></script><style></style>
<script type="application/ld+json">{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"name":"Learn","position":1,"@type":"ListItem","item":"https://learn.microsoft.com/en-us/"},{"name":"Microsoft Entra","position":2,"@type":"ListItem","item":"https://learn.microsoft.com/en-us/entra/"},{"name":"Microsoft Entra ID Governance","position":3,"@type":"ListItem","item":"https://learn.microsoft.com/en-us/entra/id-governance/"},{"name":"Privileged Identity Management","position":4,"@type":"ListItem","item":"https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/"}]}</script></head>
<body dir="ltr" lang="en-us">
<div class="header-holder has-default-focus">
<a href="#main" class="skip-to-main-link has-outline-color-text visually-hidden-until-focused position-fixed has-inner-focus focus-visible top-0 left-0 right-0 padding-xs has-text-centered has-body-background" tabindex="1">Skip to main content</a>
<div id="cookie-consent-holder" data-test-id="cookie-consent-container" hidden=""></div><div id="banner-holder" class="has-default-focus has-overflow-hidden theme-light"><!----><section data-bi-name="tier1-event-banner" data-dismissable="disappearing" class="tier1-event-banner position-relative padding-block-md skills-challenge-banner padding-block-xs display-none-visual-diff">
<div class="uhf-container display-flex-tablet align-items-center">
<div class="has-backdrop-filter-blur margin-right-xxl-tablet">
<h2 class="title is-2 margin-bottom-xs"><!---->Cloud Skills Challenge<!----></h2>
<p class="font-size-sm"><!---->Nov 15, 2023 - Jan 15, 2024<!----></p>
</div>
<p class="container is-max-mobile display-none display-block-widescreen has-backdrop-filter-blur font-size-sm margin-left-none margin-right-xxl">
Enter to win a VIP event pass for the next Microsoft Ignite or Microsoft Build! Choose from twelve unique collections on Microsoft Learn.
</p>
<a data-bi-name="CTA" class="button margin-block-sm " href="https://aka.ms/ignitecsc?ocid=ignite23_CSC_bbanner_cnl">
<span><!---->Register now<!----></span>
<span class="icon" aria-hidden="true">
<span class="docon docon-chevron-right-light"></span>
</span>
</a>
</div>
<button type="button" data-dismiss="" data-bi-name="close" class="button delete delete-lg position-absolute top-0 right-0 margin-xs margin-sm-tablet ">
<span class="visually-hidden"><!---->Dismiss alert<!----></span>
</button>
</section><!----></div>
<div id="unsupported-browser" style="
background-color: white;
color: black;
padding: 16px;
border-bottom: 1px solid grey;" hidden="">
<div style="max-width: 800px; margin: 0 auto;">
<p style="font-size: 24px">This browser is no longer supported.</p>
<p style="font-size: 16px; margin-top: 16px;">Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.</p>
<div style="margin-top: 12px;">
<a href="https://go.microsoft.com/fwlink/p/?LinkID=2092881 " style="
background-color: #0078d4;
border: 1px solid #0078d4;
color: white;
padding: 6px 12px;
border-radius: 2px;
display: inline-block;
">
Download Microsoft Edge </a>
<a href="https://learn.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge" style="
background-color: white;
padding: 6px 12px;
border: 1px solid #505050;
color: #171717;
border-radius: 2px;
display: inline-block;
">
More info about Internet Explorer and Microsoft Edge </a>
</div>
</div>
</div>
<!-- liquid-tag banners global -->
<!-- site header -->
<header id="ms--site-header" class="display-none"></header>
<div id="headerAreaHolder" data-bi-name="header">
<header role="banner" itemscope="itemscope" itemtype="http://schema.org/Organization"><!----> <div class="nav-bar" data-test-id="primary-nav-bar" data-bi-name="L1-header"><!----> <div class="nav-bar-brand display-flex align-items-center padding-none margin-left-xs margin-left-none-tablet margin-right-xxs">
<a class="nav-bar-button padding-inline-none" itemprop="url" href="https://www.microsoft.com" aria-label="Microsoft" data-bi-name="microsoft-logo-link">
<div class="nav-bar-logo" role="presentation" aria-hidden="true" itemprop="logo" itemscope="itemscope">
<svg xmlns="http://www.w3.org/2000/svg" width="108" height="23" viewBox="72 72 337 74" preserveAspectRatio="xMidYMin slice">
<g data-name="MS-symbol">
<clipPath>
<path transform="matrix(1 0 0 -1 0 216)" d="M0 216h482V0H0z"></path>
</clipPath>
<g clip-path="url(#a)">
<path d="M394.942 104.59h-10.858v25.003h-7.38V104.59h-5.182v-5.965h5.182v-4.308c0-3.254 1.06-5.92 3.178-7.998 2.12-2.079 4.835-3.118 8.15-3.118.882 0 1.666.045 2.35.135a9.37 9.37 0 011.806.407v6.296c-.24-.14-.663-.31-1.265-.512-.603-.2-1.296-.3-2.078-.3-1.528 0-2.702.476-3.526 1.43-.824.954-1.235 2.365-1.235 4.232v3.736h10.858v-6.959l7.321-2.229v9.188h7.381v5.965h-7.38v14.49c0 1.91.345 3.254 1.038 4.037.693.783 1.782 1.175 3.27 1.175.42 0 .927-.1 1.52-.3a7.178 7.178 0 001.552-.724v6.025c-.463.261-1.23.502-2.305.723a15.742 15.742 0 01-3.178.331c-3.073 0-5.378-.817-6.914-2.455-1.537-1.637-2.305-4.102-2.305-7.396zm-48.407 9.73c0 3.233.733 5.703 2.2 7.411 1.465 1.707 3.564 2.56 6.295 2.56 2.652 0 4.67-.853 6.055-2.56 1.386-1.708 2.08-4.238 2.08-7.592 0-3.334-.719-5.849-2.155-7.547-1.436-1.697-3.45-2.545-6.04-2.545-2.67 0-4.745.888-6.22 2.666-1.477 1.777-2.215 4.313-2.215 7.607m-7.592.24c0-5.12 1.446-9.177 4.338-12.17 2.892-2.993 6.91-4.489 12.05-4.489 4.841 0 8.621 1.441 11.343 4.323 2.721 2.883 4.082 6.774 4.082 11.674 0 5.021-1.447 9.018-4.338 11.99-2.892 2.973-6.829 4.458-11.81 4.458-4.8 0-8.61-1.41-11.432-4.232-2.822-2.82-4.233-6.673-4.233-11.554m-16.417-7.802c0 1.045.331 1.863.994 2.456.662.592 2.128 1.34 4.398 2.243 2.912 1.166 4.956 2.476 6.131 3.932 1.175 1.456 1.762 3.22 1.762 5.287 0 2.912-1.12 5.252-3.359 7.02-2.24 1.767-5.267 2.65-9.083 2.65-1.285 0-2.706-.155-4.263-.467-1.556-.31-2.877-.707-3.96-1.19v-7.169a17.945 17.945 0 004.277 2.198c1.526.543 2.911.814 4.157.814 1.647 0 2.862-.23 3.645-.693.784-.46 1.175-1.235 1.175-2.319 0-1.005-.406-1.853-1.22-2.546-.813-.693-2.355-1.492-4.624-2.395-2.69-1.125-4.599-2.39-5.724-3.796-1.125-1.406-1.687-3.193-1.687-5.362 0-2.792 1.11-5.086 3.33-6.884 2.217-1.797 5.095-2.696 8.63-2.696 1.084 0 2.3.12 3.645.361 1.346.242 2.47.553 3.374.934v6.93c-.964-.644-2.089-1.195-3.374-1.658-1.286-.462-2.56-.693-3.826-.693-1.386 0-2.465.271-3.238.813-.774.543-1.16 1.286-1.16 2.23m-35.066 7.562c0 3.233.733 5.703 2.2 7.411 1.465 1.707 3.564 2.56 6.295 2.56 2.652 0 4.67-.853 6.055-2.56 1.386-1.708 2.08-4.238 2.08-7.592 0-3.334-.719-5.849-2.155-7.547-1.436-1.697-3.449-2.545-6.039-2.545-2.672 0-4.745.888-6.222 2.666-1.476 1.777-2.214 4.313-2.214 7.607m-7.592.24c0-5.12 1.446-9.177 4.338-12.17 2.893-2.993 6.91-4.489 12.051-4.489 4.84 0 8.621 1.441 11.342 4.323 2.721 2.883 4.082 6.774 4.082 11.674 0 5.021-1.446 9.018-4.338 11.99-2.892 2.973-6.828 4.458-11.809 4.458-4.8 0-8.61-1.41-11.433-4.232-2.822-2.82-4.233-6.673-4.233-11.554m-3.136-16.448c.582 0 1.105.041 1.567.121.462.08.853.18 1.175.301v7.38c-.382-.28-.939-.546-1.672-.798-.733-.25-1.622-.376-2.666-.376-1.788 0-3.299.753-4.534 2.26-1.235 1.505-1.853 3.825-1.853 6.958v15.635h-7.29V98.624h7.29v4.88h.12c.663-1.687 1.667-3.007 3.013-3.96 1.346-.954 2.962-1.432 4.85-1.432m-27.956 26.18c1.084 0 2.28-.25 3.585-.754a15.06 15.06 0 003.615-1.988v6.778c-1.165.663-2.485 1.165-3.962 1.506-1.475.342-3.098.512-4.865.512-4.559 0-8.265-1.44-11.116-4.323-2.852-2.88-4.278-6.562-4.278-11.04 0-4.98 1.456-9.083 4.37-12.307 2.91-3.224 7.037-4.835 12.38-4.835 1.366 0 2.746.176 4.143.527 1.395.352 2.504.758 3.328 1.22v6.99c-1.125-.824-2.274-1.462-3.45-1.914a9.966 9.966 0 00-3.599-.678c-2.872 0-5.192.934-6.959 2.802-1.768 1.868-2.652 4.388-2.652 7.562 0 3.132.85 5.573 2.546 7.32 1.697 1.748 4.002 2.621 6.914 2.621m-22.112 5.302h-7.29V98.624h7.29zm-8.044-39.916c0-1.205.437-2.214 1.311-3.028.874-.813 1.913-1.22 3.118-1.22 1.285 0 2.35.417 3.193 1.25.844.834 1.266 1.833 1.266 2.998 0 1.185-.432 2.18-1.296 2.982-.864.804-1.918 1.205-3.163 1.205-1.246 0-2.295-.406-3.148-1.219-.854-.815-1.28-1.803-1.28-2.968m-6.274-3.284v43.2h-7.5v-33.86h-.12l-13.408 33.86h-4.97l-13.738-33.86h-.09v33.86h-6.929v-43.2h10.755l12.412 32.024h.18l13.105-32.024z" class="fill-current-color fill-link-text-forced-colors color-text-subtle"></path>
<path d="M106.214 106.214H71.996V71.996h34.218z" fill="#f25022"></path>
<path d="M143.993 106.214h-34.218V71.996h34.218z" fill="#7fba00"></path>
<path d="M106.214 143.993H71.996v-34.218h34.218z" fill="#00a4ef"></path>
<path d="M143.993 143.993h-34.218v-34.218h34.218z" fill="#ffb900"></path>
</g>
</g>
</svg>
</div>
</a>
</div>
<div class="nav-bar-item is-hidden-tablet">
<div class="nav-bar-menu">
<button class="nav-bar-button is-title" data-test-id="mobile-nav-expander" title="Global navigation" aria-expanded="false">
<span class="nav-bar-menu-title"><!---->Documentation<!----></span>
<div class="nav-bar-burger">
<span></span>
<span></span>
<span></span>
<span class="nav-bar-burger-label"><!---->Global navigation<!----></span>
</div>
</button>
</div>
</div>
<nav class="nav-bar-nav" role="navigation" aria-label="Global">
<ul class="nav-bar-nav-list">
<li class="nav-bar-item is-category">
<a data-test-id="header-link-category" class="nav-bar-button is-title has-hover-underline" itemprop="url" data-bi-name="L1-category-link" href="/en-us/">
<span><!---->Learn<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-documentation" class=" nav-bar-button has-hover-underline is-active" href="/en-us/docs/" aria-current="true" data-bi-name="L1-navigation-link">
<span><!---->Documentation<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-training" class=" nav-bar-button has-hover-underline " href="/en-us/training/" data-bi-name="L1-navigation-link">
<span><!---->Training<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-credentials" class=" nav-bar-button has-hover-underline " href="/en-us/credentials/" data-bi-name="L1-navigation-link">
<span><!---->Credentials<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-q&a" class=" nav-bar-button has-hover-underline " href="/en-us/answers/" data-bi-name="L1-navigation-link">
<span><!---->Q&A<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-code-samples" class=" nav-bar-button has-hover-underline " href="/en-us/samples/browse/" data-bi-name="L1-navigation-link">
<span><!---->Code Samples<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-assessments" class=" nav-bar-button has-hover-underline " href="/en-us/assessments/" data-bi-name="L1-navigation-link">
<span><!---->Assessments<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-shows" class=" nav-bar-button has-hover-underline " href="/en-us/shows/" data-bi-name="L1-navigation-link">
<span><!---->Shows<!----></span>
</a>
</li>
<!----> <li class="dropdown nav-bar-item" hidden="">
<button aria-expanded="false" class="dropdown-trigger nav-bar-button has-hover-underline" aria-controls="ax-46" data-bi-name="L1-navigation-menu" value="undefined">
<span><!---->More<!----></span>
<span class="nav-bar-button-chevron" aria-hidden="true">
<span class="docon docon-chevron-down-light expanded-indicator"></span>
</span>
</button>
<ul class="dropdown-menu" id="ax-46" aria-label="More">
<!---->
<li class="nav-bar-item" hidden="">
<a class=" nav-bar-button is-active" href="/en-us/docs/" aria-current="true" data-bi-name="L1-navigation-link">
Documentation
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class=" nav-bar-button " href="/en-us/training/" data-bi-name="L1-navigation-link">
Training
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class=" nav-bar-button " href="/en-us/credentials/" data-bi-name="L1-navigation-link">
Credentials
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class=" nav-bar-button " href="/en-us/answers/" data-bi-name="L1-navigation-link">
Q&A
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class=" nav-bar-button " href="/en-us/samples/browse/" data-bi-name="L1-navigation-link">
Code Samples
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class=" nav-bar-button " href="/en-us/assessments/" data-bi-name="L1-navigation-link">
Assessments
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class=" nav-bar-button " href="/en-us/shows/" data-bi-name="L1-navigation-link">
Shows
</a>
</li>
<!---->
</ul>
</li><!---->
</ul>
</nav>
<span class="nav-bar-spacer"></span>
<div class="nav-bar-search " id="ax-47" hidden="">
<form class="nav-bar-search-form" method="GET" name="nav-bar-search-form" role="search" id="nav-bar-search-form" aria-label="Search" action="/en-us/search/">
<div class="autocomplete" data-bi-name="autocomplete"><!---->
<div class="field-body control ">
<input role="combobox" maxlength="100" aria-autocomplete="list" autocapitalize="none" autocomplete="off" autocorrect="off" spellcheck="false" id="site-search-input" data-test-id="site-search-input" class="autocomplete-input input input-sm
" type="search" name="terms" aria-expanded="false" aria-owns="ax-48-listbox" aria-controls="ax-48-listbox" aria-activedescendant="" aria-label="Search" aria-describedby="ms--site-search-input-description" placeholder="Search" pattern=".*">
<span aria-hidden="true" class="autocomplete-loader loader has-text-primary " hidden=""></span>
<span id="ms--site-search-input-description" hidden="">
Suggestions will filter as you type
</span>
</div>
<ul role="listbox" id="ax-48-listbox" data-test-id="site-search-input-listbox" class="autocomplete-suggestions is-vertically-scrollable padding-xxs " aria-label="Suggestions" hidden="">
</ul>
<!----></div>
<!-- mobile safari will not dispatch submit event unless there's a submit button that is not display:none -->
<button type="submit" class="visually-hidden" tabindex="-1" aria-hidden="true"></button>
<input name="category" value="" hidden="">
</form>
</div>
<div class="nav-bar-search">
<!-- hidden when the width drops to tablet -->
<form class="nav-bar-search-form" method="GET" name="nav-bar-search-form" role="search" id="nav-bar-search-form-desktop" aria-label="Search" action="/en-us/search/">
<div class="autocomplete" data-bi-name="autocomplete"><!---->
<div class="field-body control has-icons-left">
<input role="combobox" maxlength="100" aria-autocomplete="list" autocapitalize="none" autocomplete="off" autocorrect="off" spellcheck="false" id="site-search-input-desktop" data-test-id="site-search-input-desktop" class="autocomplete-input input input-sm
control has-icons-left
" type="search" name="terms" aria-expanded="false" aria-owns="ax-49-listbox" aria-controls="ax-49-listbox" aria-activedescendant="" aria-label="Search" aria-describedby="ms--site-search-input-desktop-description" placeholder="Search" pattern=".*">
<span aria-hidden="true" class="icon is-small is-left">
<span class="has-text-primary docon docon-search"></span>
</span>
<span aria-hidden="true" class="autocomplete-loader loader has-text-primary " hidden=""></span>
<span id="ms--site-search-input-desktop-description" hidden="">
Suggestions will filter as you type
</span>
</div>
<ul role="listbox" id="ax-49-listbox" data-test-id="site-search-input-desktop-listbox" class="autocomplete-suggestions is-vertically-scrollable padding-xxs " aria-label="Suggestions" hidden="">
</ul>
<!----></div>
<!-- mobile safari will not dispatch submit event unless there's a submit button that is not display:none -->
<button type="submit" class="visually-hidden" tabindex="-1" aria-hidden="true"></button>
<input name="category" value="" hidden="">
</form>
</div>
<div class="nav-bar-search " hidden="">
<div class="nav-bar-search-form-expander">
<button id="form-expander" data-test-id="form-expander" class="nav-bar-button has-hover-underline " title="Search" aria-expanded="false" aria-controls="ax-47">
<span class="is-visually-hidden-mobile"><!---->Search<!----></span>
<span class="icon margin-left-xxs" aria-hidden="true">
<span class="docon docon-search"></span>
</span>
</button>
</div>
</div>
<div class="nav-bar-profile">
<a class="docs-sign-in auth-status-determined not-authenticated" href="#"> Sign in </a>
<div class="dropdown has-caret auth-status-determined authenticated">
<button class="dropdown-trigger button-reset" aria-controls="user-menu" aria-expanded="false" data-bi-name="L1-user-menu" aria-label="Your Account">
<figure class="image is-36x36">
<img class="has-body-background-medium border-radius-rounded" alt="" data-profile-property="avatarThumbnailUrl">
</figure>
</button>
<div class="dropdown-menu box justify-content-flex-start has-body-background" id="user-menu" data-bi-name="user-menu" role="menu">
<div class="media is-user-dir">
<div class="media-left">
<figure class="image is-48x48" aria-hidden="true">
<img class="has-body-background-medium border-radius-rounded" aria-labelledby="displayName" alt="" data-profile-property="avatarUrl">
</figure>
</div>
<div class="media-content">
<h2 class="title font-size-lg">
<span id="displayName" class="is-inline-truncated has-max-width-200" data-profile-property="displayName"></span>
</h2>
<p class="subtitle font-size-sm margin-bottom-none">
<span class="is-inline-truncated has-max-width-200" data-profile-property="upn"></span>
</p>
</div>
</div>
<ul class="padding-top-xs padding-bottom-xs">
<li class="padding-bottom-xs">
<a data-profile-property="profileUrl" href="https://learn.microsoft.com/en-us/users/me/activity/"><!---->Profile<!----></a>
</li>
<li>
<a data-profile-property="settingsUrl" href="https://learn.microsoft.com/en-us/users/me/settings/"><!---->Settings<!----></a>
</li>
</ul>
<div class="border-top padding-top-xs">
<a class="docs-sign-out" href="#"><!---->Sign out<!----></a>
</div>
</div>
</div>
</div>
<!----></div> <div class="nav-bar border-top is-hidden-mobile" data-test-id="secondary-nav-bar" data-bi-name="L2-header"><!---->
<a class="nav-bar-button is-title has-hover-underline" itemprop="url" data-bi-name="L2-category-link" href="/en-us/entra">
<span>
Microsoft Entra
</span>
</a>
<nav class="nav-bar-nav" role="navigation" aria-label="Site">
<ul class="nav-bar-nav-list">
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-microsoft-entra-id" class="has-external-link-indicator nav-bar-button has-hover-underline " href="/en-us/entra/identity/" data-bi-name="L2-navigation-link">
<span><!---->Microsoft Entra ID<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-external-id" class="has-external-link-indicator nav-bar-button has-hover-underline " href="/en-us/entra/external-id/" data-bi-name="L2-navigation-link">
<span><!---->External ID<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-global-secure-access" class="has-external-link-indicator nav-bar-button has-hover-underline " href="/en-us/entra/global-secure-access/" data-bi-name="L2-navigation-link">
<span><!---->Global Secure Access<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-id-governance" class="has-external-link-indicator nav-bar-button has-hover-underline " href="/en-us/entra/id-governance/" data-bi-name="L2-navigation-link">
<span><!---->ID Governance<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-permissions-management" class="has-external-link-indicator nav-bar-button has-hover-underline " href="/en-us/entra/permissions-management/" data-bi-name="L2-navigation-link">
<span><!---->Permissions Management<!----></span>
</a>
</li>
<!---->
<li class="nav-bar-item">
<a data-test-id="header-link-microsoft-security-documentation" class="has-external-link-indicator nav-bar-button has-hover-underline " href="/en-us/security/" data-bi-name="L2-navigation-link">
<span><!---->Microsoft Security documentation<!----></span>
</a>
</li>
<!----> <li class="dropdown nav-bar-item" hidden="">
<button aria-expanded="false" class="dropdown-trigger nav-bar-button has-hover-underline" aria-controls="ax-50" data-bi-name="L2-navigation-menu" value="undefined">
<span><!---->More<!----></span>
<span class="nav-bar-button-chevron" aria-hidden="true">
<span class="docon docon-chevron-down-light expanded-indicator"></span>
</span>
</button>
<ul class="dropdown-menu" id="ax-50" aria-label="More">
<!---->
<li class="nav-bar-item" hidden="">
<a class="has-external-link-indicator nav-bar-button " href="/en-us/entra/identity/" data-bi-name="L2-navigation-link">
Microsoft Entra ID
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class="has-external-link-indicator nav-bar-button " href="/en-us/entra/external-id/" data-bi-name="L2-navigation-link">
External ID
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class="has-external-link-indicator nav-bar-button " href="/en-us/entra/global-secure-access/" data-bi-name="L2-navigation-link">
Global Secure Access
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class="has-external-link-indicator nav-bar-button " href="/en-us/entra/id-governance/" data-bi-name="L2-navigation-link">
ID Governance
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class="has-external-link-indicator nav-bar-button " href="/en-us/entra/permissions-management/" data-bi-name="L2-navigation-link">
Permissions Management
</a>
</li>
<!---->
<li class="nav-bar-item" hidden="">
<a class="has-external-link-indicator nav-bar-button " href="/en-us/security/" data-bi-name="L2-navigation-link">
Microsoft Security documentation
</a>
</li>
<!---->
</ul>
</li><!---->
</ul>
</nav>
<span class="nav-bar-spacer"></span>
<ol class="nav-bar-list">
<li class="nav-bar-item ">
<a data-test-id="navbar-primary-cta" class="button button-sm button-primary button-filled" href="https://entra.microsoft.com/" data-bi-name="L2-primary-cta">
Admin center
</a>
</li>
</ol>
<!----></div> <!----></header> </div>
<div id="content-header" class="content-header uhf-container has-padding has-default-focus border-bottom-none" data-bi-name="content-header">
<div class="content-header-controls margin-xxs margin-inline-sm-tablet">
<button type="button" class="contents-button button button-sm margin-right-xxs" data-bi-name="contents-expand" aria-haspopup="true" data-contents-button="">
<span class="icon"><span class="docon docon-menu" aria-hidden="true"></span></span>
<span class="contents-expand-title">
Table of contents </span>
</button>
<button type="button" class="ap-collapse-behavior ap-expanded button button-sm" data-bi-name="ap-collapse" aria-controls="action-panel">
<span class="icon"><span class="docon docon-exit-mode" aria-hidden="true"></span></span>
<span>Exit focus mode</span>
</button>
</div>
</div>
<div id="disclaimer-holder" class="has-overflow-hidden has-default-focus">
<!-- liquid-tag banners sectional -->
</div>
</div>
<div class="mainContainer uhf-container has-default-focus" data-bi-name="body">
<div class="columns has-large-gaps is-gapless-mobile ">
<div id="left-container" class="left-container is-hidden-mobile column is-one-third-tablet is-one-quarter-desktop">
<nav id="affixed-left-container" class="margin-top-sm-tablet position-sticky display-flex flex-direction-column" role="navigation" aria-label="Primary" style="top: 24px; height: calc(-306px + 100vh); max-height: 8946.5px;" data-bi-name="left toc"><form action="javascript:" role="search" aria-label="Search" class="margin-bottom-xxs"><label class="visually-hidden" for="ax-36">Search</label><div class="autocomplete display-block" data-bi-name="autocomplete"><!---->
<div class="field-body control has-icons-left">
<input role="combobox" maxlength="100" aria-autocomplete="list" autocapitalize="none" autocomplete="off" autocorrect="off" spellcheck="false" id="ax-36" data-test-id="ax-36" class="autocomplete-input input input-sm
control has-icons-left
width-full" type="text" aria-expanded="false" aria-owns="ax-37-listbox" aria-controls="ax-37-listbox" aria-activedescendant="" aria-describedby="ms--ax-36-description" placeholder="Filter by title" pattern=".*">
<span aria-hidden="true" class="icon is-small is-left">
<span class="has-text-primary docon docon-filter-settings"></span>
</span>
<span aria-hidden="true" class="autocomplete-loader loader has-text-primary " hidden=""></span>
<span id="ms--ax-36-description" hidden="">
Suggestions will filter as you type
</span>
</div>
<ul role="listbox" id="ax-37-listbox" data-test-id="ax-36-listbox" class="autocomplete-suggestions is-vertically-scrollable padding-xxs " aria-label="Suggestions" hidden="">
</ul>
<!----></div></form><ul class="tree table-of-contents is-vertically-scrollable flex-grow-1 flex-shrink-1" role="tree" aria-label="Table of contents" data-bi-name="tree" data-is-collapsible="true"><li role="none"><a aria-setsize="5" aria-level="1" aria-posinset="1" role="treeitem" tabindex="-1" class="tree-item is-leaf has-external-link-indicator" data-bi-name="tree-leaf" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/">Privileged Identity Management documentation</a></li><li class="tree-item is-expanded" aria-setsize="5" aria-level="1" aria-posinset="2" role="treeitem" tabindex="-1" id="title-2-1" aria-expanded="true"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Overview</span><ul class="tree-group" role="group"><li role="none"><a aria-setsize="1" aria-level="2" aria-posinset="1" role="treeitem" tabindex="0" class="tree-item is-leaf has-external-link-indicator is-selected" data-bi-name="tree-leaf" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure" aria-current="page">What is Microsoft Entra PIM?</a></li></ul></li><li class="tree-item" aria-setsize="5" aria-level="1" aria-posinset="3" role="treeitem" tabindex="-1" id="title-3-1" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Concepts</span></li><li class="tree-item is-expanded" aria-setsize="5" aria-level="1" aria-posinset="4" role="treeitem" tabindex="-1" id="title-4-1" aria-expanded="true"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>How-to guides</span><ul class="tree-group" role="group"><li role="none"><a aria-setsize="14" aria-level="2" aria-posinset="1" role="treeitem" tabindex="-1" class="tree-item is-leaf has-external-link-indicator" data-bi-name="tree-leaf" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-deployment-plan">Deploy PIM</a></li><li role="none"><a aria-setsize="14" aria-level="2" aria-posinset="2" role="treeitem" tabindex="-1" class="tree-item is-leaf has-external-link-indicator" data-bi-name="tree-leaf" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-getting-started">Start using PIM</a></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="3" role="treeitem" tabindex="-1" id="title-4-1_3-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Bring under management</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="4" role="treeitem" tabindex="-1" id="title-4-1_4-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Assign</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="5" role="treeitem" tabindex="-1" id="title-4-1_5-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Activate</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="6" role="treeitem" tabindex="-1" id="title-4-1_6-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Approve</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="7" role="treeitem" tabindex="-1" id="title-4-1_7-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Extend or renew</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="8" role="treeitem" tabindex="-1" id="title-4-1_8-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Set role settings</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="9" role="treeitem" tabindex="-1" id="title-4-1_9-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Set up alerts</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="10" role="treeitem" tabindex="-1" id="title-4-1_10-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Audits</span></li><li class="tree-item" aria-setsize="14" aria-level="2" aria-posinset="11" role="treeitem" tabindex="-1" id="title-4-1_11-2" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Review access</span></li><li role="none"><a aria-setsize="14" aria-level="2" aria-posinset="12" role="treeitem" tabindex="-1" class="tree-item is-leaf has-external-link-indicator" data-bi-name="tree-leaf" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-security-wizard">Discovery & Insights for Microsoft Entra roles</a></li><li role="none"><a aria-setsize="14" aria-level="2" aria-posinset="13" role="treeitem" tabindex="-1" class="tree-item is-leaf has-external-link-indicator" data-bi-name="tree-leaf" href="https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?toc=/entra/identity/privileged-identity-management/toc.json&bc=/entra/identity/id-governance/privileged-identity-management/breadcrumb/toc.json">Elevate access to manage Azure subscriptions</a></li><li role="none"><a aria-setsize="14" aria-level="2" aria-posinset="14" role="treeitem" tabindex="-1" class="tree-item is-leaf has-external-link-indicator" data-bi-name="tree-leaf" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-troubleshoot">Troubleshoot resource access denied</a></li></ul></li><li class="tree-item" aria-setsize="5" aria-level="1" aria-posinset="5" role="treeitem" tabindex="-1" id="title-5-1" aria-expanded="false"><span data-bi-name="tree-expander" class="tree-expander"><span class="tree-expander-indicator docon docon-chevron-right-light" aria-hidden="true"></span>Reference</span></li></ul><div class="padding-xxs padding-none-tablet border-top border-bottom-tablet"><button class="button button-sm button-clear button-block inner-focus justify-content-flex-start-tablet" data-bi-name="download-pdf" rel="nofollow"><!---->
<span class="icon" aria-hidden="true">
<span class="docon docon-dictionary-download"></span>
</span>
<span><!---->Download PDF<!----></span>
<!----></button></div></nav>
</div>
<!-- .primary-holder -->
<section class="primary-holder column is-two-thirds-tablet is-three-quarters-desktop">
<!--div.columns -->
<div class="columns is-gapless-mobile has-large-gaps ">
<div id="main-column" class="column is-full is-8-desktop">
<main id="main" class="" role="main" data-bi-name="content" dir="ltr" lang="en-us">
<!-- article-header -->
<div id="article-header" class="background-color-body margin-top-sm-tablet margin-bottom-xs display-none-print">
<div class="display-flex align-items-center ">
<details id="article-header-breadcrumbs-overflow-popover" class="popover" data-for="article-header-breadcrumbs" hidden="">
<summary class="button button-clear button-primary button-sm inner-focus" aria-label="All breadcrumbs">
<span class="icon">
<span class="docon docon-more"></span>
</span>
</summary>
<div id="article-header-breadcrumbs-overflow" class="popover-content padding-none"><!---->
<nav>
<ol class="list-style-none">
<!---->
<li class="line-clamp-1">
<a class="display-block has-inner-focus padding-inline-xs padding-block-xxs border-radius font-size-sm" href="https://learn.microsoft.com/en-us/">
Learn
</a>
</li>
<!----><!---->
<li class="line-clamp-1">
<a class="display-block has-inner-focus padding-inline-xs padding-block-xxs border-radius font-size-sm" href="https://learn.microsoft.com/en-us/entra/">
Microsoft Entra
</a>
</li>
<!----><!---->
<li class="line-clamp-1">
<a class="display-block has-inner-focus padding-inline-xs padding-block-xxs border-radius font-size-sm" href="https://learn.microsoft.com/en-us/entra/id-governance/">
Microsoft Entra ID Governance
</a>
</li>
<!----><!---->
<li class="line-clamp-1">
<a class="display-block has-inner-focus padding-inline-xs padding-block-xxs border-radius font-size-sm" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/">
Privileged Identity Management
</a>
</li>
<!---->
</ol>
</nav>
<!----></div>
</details>
<bread-crumbs id="article-header-breadcrumbs" data-test-id="article-header-breadcrumbs" class="overflow-hidden flex-grow-1 margin-right-sm margin-right-md-tablet margin-right-lg-desktop margin-left-negative-xxs padding-left-xxs" style="display: block; white-space: nowrap; overflow: hidden;"><!---->
<nav>
<ol class="breadcrumbs">
<!---->
<li class="breadcrumbs-item" data-bread-crumbs-collapse-target="">
<a href="https://learn.microsoft.com/en-us/"><!---->Learn<!----></a>
</li>
<!----><!---->
<li class="breadcrumbs-item" data-bread-crumbs-collapse-target="">
<a href="https://learn.microsoft.com/en-us/entra/"><!---->Microsoft Entra<!----></a>
</li>
<!----><!---->
<li class="breadcrumbs-item" data-bread-crumbs-collapse-target="">
<a href="https://learn.microsoft.com/en-us/entra/id-governance/"><!---->Microsoft Entra ID Governance<!----></a>
</li>
<!----><!---->
<li class="breadcrumbs-item" data-bread-crumbs-collapse-target="" style="">
<a href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/" style=""><!---->Privileged Identity Management<!----></a>
</li>
<!---->
</ol>
</nav>
<!----></bread-crumbs>
<div id="article-header-page-actions" class="margin-left-auto display-flex flex-wrap-no-wrap align-items-stretch">
<a id="lang-link-tablet" class="button button-primary button-clear button-sm display-none display-inline-flex-tablet" title="Read in English" data-bi-name="language-toggle" data-read-in-link="" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure" data-bi="{"cN":"language-toggle","value":"off"}" hidden="">
<span class="icon margin-none" aria-hidden="true" data-read-in-link-icon="">
<span class="docon docon-locale-globe"></span>
</span>
<span class="is-visually-hidden" data-read-in-link-text="">Read in English</span>
</a>
<button type="button" class="collection button button-clear button-sm button-primary display-none display-inline-flex-tablet" data-list-type="collection" data-bi-name="collection" title="Add What is Privileged Identity Management? - Microsoft Entra ID Governance | Microsoft Learn to a collection" data-pressed="false">
<span class="icon margin-none" aria-hidden="true">
<span class="docon docon-circle-addition"></span>
</span>
<span class="collection-status is-visually-hidden">Add</span>
</button>
<a data-contenteditbtn="" class="button button-clear button-sm text-decoration-none button-primary display-none display-inline-flex-tablet" aria-label="Edit" title="Edit This Document" data-bi-name="edit" href="https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/id-governance/privileged-identity-management/pim-configure.md" data-original_content_git_url="https://github.com/MicrosoftDocs/entra-docs-pr/blob/live/docs/id-governance/privileged-identity-management/pim-configure.md" data-original_content_git_url_template="{repo}/blob/{branch}/docs/id-governance/privileged-identity-management/pim-configure.md" data-pr_repo="" data-pr_branch="">
<span class="icon margin-none" aria-hidden="true">
<span class="docon docon-edit-outline"></span>
</span>
</a>
<details class="popover popover-right" id="article-header-page-actions-overflow">
<summary class="justify-content-flex-start button button-clear button-sm button-primary" aria-label="More actions">
<span class="icon" aria-hidden="true">
<span class="docon docon-more-vertical"></span>
</span>
</summary>
<div class="popover-content padding-none">
<button data-page-action-item="overflow-mobile" type="button" class="justify-content-flex-start button-block button-sm has-inner-focus button button-clear display-none-tablet" data-bi-name="contents-expand" data-contents-button="" data-popover-close="">
<span class="icon">
<span class="docon docon-editor-list-bullet" aria-hidden="true"></span>
</span>
<span class="contents-expand-title">Table of contents</span>
</button>
<a id="lang-link-overflow" class="justify-content-flex-start button-sm has-inner-focus button button-clear button-block display-none-tablet" title="Read in English" data-bi-name="language-toggle" data-page-action-item="overflow-mobile" data-check-hidden="true" data-read-in-link="" href="https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure" data-bi="{"cN":"language-toggle","value":"off"}" hidden="">
<span class="icon" aria-hidden="true" data-read-in-link-icon="">
<span class="docon docon-locale-globe"></span>
</span>
<span data-read-in-link-text="">Read in English</span>
</a>
<button type="button" class="collection justify-content-flex-start button button-clear button-sm has-inner-focus button-block display-none-tablet" data-list-type="collection" data-bi-name="collection" title="Add What is Privileged Identity Management? - Microsoft Entra ID Governance | Microsoft Learn to a collection" data-page-action-item="overflow-mobile" data-check-hidden="true" data-popover-close="" data-pressed="false">
<span class="icon" aria-hidden="true">
<span class="docon docon-circle-addition"></span>
</span>
<span class="collection-status">Add</span>
</button>
<a data-contenteditbtn="" class="button button-clear button-block button-sm has-inner-focus justify-content-flex-start text-decoration-none display-none-tablet" aria-label="Edit" title="Edit This Document" data-bi-name="edit" href="https://github.com/MicrosoftDocs/entra-docs/blob/main/docs/id-governance/privileged-identity-management/pim-configure.md" data-original_content_git_url="https://github.com/MicrosoftDocs/entra-docs-pr/blob/live/docs/id-governance/privileged-identity-management/pim-configure.md" data-original_content_git_url_template="{repo}/blob/{branch}/docs/id-governance/privileged-identity-management/pim-configure.md" data-pr_repo="" data-pr_branch="">
<span class="icon" aria-hidden="true">
<span class="docon docon-edit-outline"></span>
</span>
<span>Edit</span>
</a>
<button class="button button-block button-clear button-sm justify-content-flex-start has-inner-focus" title="Print" type="button" aria-label="Print" data-bi-name="print" data-page-action-item="overflow-all" data-popover-close="" data-print-page="" data-check-hidden="true">
<span class="icon" aria-hidden="true">
<span class="docon docon-print"></span>
</span>
<span>Print</span>
</button>
<div aria-hidden="true" class="margin-none
border-top" data-page-action-item="overflow-all"></div>
<a class="button button-clear button-sm has-inner-focus button-block text-decoration-none justify-content-flex-start share-twitter" data-bi-name="twitter" data-page-action-item="overflow-all" href="https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure%3FWT.mc_id%3Dtwitter&text=Today%20I%20completed%20%22What%20is%20Privileged%20Identity%20Management%3F%20-%20Microsoft%20Entra%20ID%20Governance%20%7C%20Microsoft%20Learn%22!%20I'm%20so%20proud%20to%20be%20celebrating%20this%20achievement%20and%20hope%20this%20inspires%20you%20to%20start%20your%20own%20%40MicrosoftLearn%20journey!&tw_p=tweetbutton&url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure%3FWT.mc_id%3Dtwitter">
<span class="icon" aria-hidden="true">
<span class="docon docon-brand-twitter"></span>
</span>
<span>Twitter</span>
</a>
<a class="button button-clear button-sm has-inner-focus button-block text-decoration-none justify-content-flex-start share-linkedin" data-bi-name="linkedin" data-page-action-item="overflow-all" href="https://www.linkedin.com/feed/?shareActive=true&text=Today%20I%20completed%20%22What%20is%20Privileged%20Identity%20Management%3F%20-%20Microsoft%20Entra%20ID%20Governance%20%7C%20Microsoft%20Learn%22!%20I'm%20so%20proud%20to%20be%20celebrating%20this%20achievement%20and%20hope%20this%20inspires%20you%20to%20start%20your%20own%20%40MicrosoftLearn%20journey!%0A%0D%0Ahttps%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure%3FWT.mc_id%3Dlinkedin">
<span class="icon" aria-hidden="true">
<span class="docon docon-brand-linkedin"></span>
</span>
<span>LinkedIn</span>
</a>
<a class="button button-clear button-sm button-block has-inner-focus text-decoration-none justify-content-flex-start share-facebook" data-bi-name="facebook" data-page-action-item="overflow-all" href="https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure%3FWT.mc_id%3Dfacebook">
<span class="icon" aria-hidden="true">
<span class="docon docon-brand-facebook"></span>
</span>
<span>Facebook</span>
</a>
<a class="button button-clear button-sm button-block has-inner-focus text-decoration-none justify-content-flex-start share-email" data-bi-name="email" data-page-action-item="overflow-all" href="mailto:?subject=%5BShared%20Article%5D%20What%20is%20Privileged%20Identity%20Management%3F%20-%20Microsoft%20Entra%20ID%20Governance%20%7C%20Microsoft%20Learn&body=Today%20I%20completed%20%22What%20is%20Privileged%20Identity%20Management%3F%20-%20Microsoft%20Entra%20ID%20Governance%20%7C%20Microsoft%20Learn%22!%20I'm%20so%20proud%20to%20be%20celebrating%20this%20achievement%20and%20hope%20this%20inspires%20you%20to%20start%20your%20own%20%40MicrosoftLearn%20journey!%0A%0D%0Ahttps%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure%3FWT.mc_id%3Demail">
<span class="icon" aria-hidden="true">
<span class="docon docon-mail-message-fill"></span>
</span>
<span>Email</span>
</a>
</div>
</details>
</div>
</div>
</div>
<!-- end article-header -->
<div>
<button type="button" class="border contents-button button button-clear button-sm is-hidden-tablet has-inner-focus" data-bi-name="contents-expand" data-contents-button="" hidden="">
<span class="icon">
<span class="docon docon-editor-list-bullet" aria-hidden="true"></span>
</span>
<span class="contents-expand-title">Table of contents</span>
</button>
</div>
<!-- end mobile-contents button -->
<div class="content ">
<h1 id="what-is-microsoft-entra-privileged-identity-management">What is Microsoft Entra Privileged Identity Management?</h1>
<div class="display-flex justify-content-space-between align-items-center flex-wrap-wrap page-metadata-container">
<div class="margin-right-xxs">
<ul class="metadata page-metadata" data-bi-name="page info" dir="ltr" lang="en-us">
<li>
Article </li>
<li class="visibility-hidden-visual-diff">
<time class="" data-article-date="" aria-label="Article review date" datetime="2023-10-27T16:54:00.000Z" data-article-date-source="calculated">10/27/2023</time>
</li>
<li class="contributors-holder display-none-print">
<button aria-label="View all contributors" class="contributors-button link-button" data-bi-name="contributors" title="View all contributors">
18 contributors
</button>
</li>
</ul>
</div>
<div id="user-feedback" class="margin-block-xxs display-none-print" data-hide-on-archived="">
<button id="user-feedback-button" data-test-id="conceptual-feedback-button" class="button button-sm button-clear button-primary" type="button" data-bi-name="user-feedback-button" data-user-feedback-button="">
<span class="icon" aria-hidden="true">
<span class="docon docon-like"></span>
</span>
<span>Feedback</span>
</button>
</div>
</div>
<div id="ms--inline-notifications" data-bi-name="inline-notification"></div>
<nav id="center-doc-outline" class="doc-outline display-none-print margin-bottom-sm" data-bi-name="intopic toc" role="navigation" aria-label="In this article"><!---->
<h2 id="ms--in-this-article" class="title is-6 margin-block-xs"><!---->In this article<!----></h2>
<ol id="content-well-in-this-article-list" class="border-left padding-left-xxs" aria-live="polite" aria-relevant="additions">
<!---->
<li class="">
<a href="#reasons-to-use"><!---->Reasons to use<!----></a>
</li>
<!---->
<li class="">
<a href="#license-requirements"><!---->License requirements<!----></a>
</li>
<!---->
<li class="">
<a href="#what-does-it-do"><!---->What does it do?<!----></a>
</li>
<!---->
<li class="">
<a href="#what-can-i-do-with-it"><!---->What can I do with it?<!----></a>
</li>
<!---->
<li class="expandable">
<a href="#who-can-do-what"><!---->Who can do what?<!----></a>
</li>
<!---->
<li class="expandable">
<a href="#terminology"><!---->Terminology<!----></a>
</li>
<!---->
<li class="expandable">
<a href="#role-assignment-overview"><!---->Role assignment overview<!----></a>
</li>
<!---->
<li class="expandable">
<a href="#scenarios"><!---->Scenarios<!----></a>
</li>
<!---->
<li class="expandable">
<a href="#next-steps"><!---->Next steps<!----></a>
</li>
<!---->
</ol>
<button type="button" aria-expanded="false" data-show-more="" class="link-button font-weight-semibold font-size-sm margin-top-xxs margin-left-xs" aria-controls="content-well-in-this-article-list" data-title="Show 5 more" data-bi-name="show-more-btn">
<span class="show-more-text "><!---->Show 5 more<!----></span>
</button>
<!----></nav>
<!-- <content> -->
<p>Privileged Identity Management (PIM) is a service in Microsoft Entra ID that enables you to manage, control, and monitor access to important resources in your organization. These resources include resources in Microsoft Entra ID, Azure, and other Microsoft Online Services such as Microsoft 365 or Microsoft Intune. The following video explains important PIM concepts and features.
<br><br></p>
<div class="embeddedvideo"><iframe src="https://www.youtube-nocookie.com/embed/f-0K7mRUPpQ" allowfullscreen="true" data-linktype="external" title="Video: f-0K7mRUPpQ" frameborder="0"></iframe></div>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#reasons-to-use" aria-label="Section titled: Reasons to use"></a><h2 id="reasons-to-use" class="heading-anchor">Reasons to use</h2></div>
<p>Organizations want to minimize the number of people who have access to secure information or resources, because that reduces the chance of</p>
<ul>
<li>a malicious actor getting access</li>
<li>an authorized user inadvertently impacting a sensitive resource</li>
</ul>
<p>However, users still need to carry out privileged operations in Microsoft Entra ID, Azure, Microsoft 365, or SaaS apps. Organizations can give users just-in-time privileged access to Azure and Microsoft Entra resources and can oversee what those users are doing with their privileged access.</p>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#license-requirements" aria-label="Section titled: License requirements"></a><h2 id="license-requirements" class="heading-anchor">License requirements</h2></div>
<p>Using Privileged Identity Management requires licenses. For more information on licensing, see <a href="../licensing-fundamentals" data-linktype="relative-path">Microsoft Entra ID Governance licensing fundamentals</a> .</p>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#what-does-it-do" aria-label="Section titled: What does it do?"></a><h2 id="what-does-it-do" class="heading-anchor">What does it do?</h2></div>
<p>Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management:</p>
<ul>
<li>Provide <strong>just-in-time</strong> privileged access to Microsoft Entra ID and Azure resources</li>
<li>Assign <strong>time-bound</strong> access to resources using start and end dates</li>
<li>Require <strong>approval</strong> to activate privileged roles</li>
<li>Enforce <strong>multi-factor authentication</strong> to activate any role</li>
<li>Use <strong>justification</strong> to understand why users activate</li>
<li>Get <strong>notifications</strong> when privileged roles are activated</li>
<li>Conduct <strong>access reviews</strong> to ensure users still need roles</li>
<li>Download <strong>audit history</strong> for internal or external audit</li>
<li>Prevents removal of the <strong>last active Global Administrator</strong> and <strong>Privileged Role Administrator</strong> role assignments</li>
</ul>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#what-can-i-do-with-it" aria-label="Section titled: What can I do with it?"></a><h2 id="what-can-i-do-with-it" class="heading-anchor">What can I do with it?</h2></div>
<p>Once you set up Privileged Identity Management, you'll see <strong>Tasks</strong>, <strong>Manage</strong>, and <strong>Activity</strong> options in the left navigation menu. As an administrator, you can choose between options such as managing <strong>Microsoft Entra roles</strong>, managing <strong>Azure resource</strong> roles, or PIM for Groups. When you choose what you want to manage, you see the appropriate set of options for that option.</p>
<p><img src="media/pim-configure/pim-quickstart.png" alt="Screenshot of Privileged Identity Management in the Azure portal." data-linktype="relative-path"></p>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#who-can-do-what" aria-label="Section titled: Who can do what?"></a><h2 id="who-can-do-what" class="heading-anchor">Who can do what?</h2></div>
<p>For Microsoft Entra roles in Privileged Identity Management, only a user who is in the Privileged Role Administrator or Global Administrator role can manage assignments for other administrators. Global Administrators, Security Administrators, Global Readers, and Security Readers can also view assignments to Microsoft Entra roles in Privileged Identity Management.</p>
<p>For Azure resource roles in Privileged Identity Management, only a subscription administrator, a resource Owner, or a resource User Access administrator can manage assignments for other administrators. Users who are Privileged Role Administrators, Security Administrators, or Security Readers don't by default have access to view assignments to Azure resource roles in Privileged Identity Management.</p>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#terminology" aria-label="Section titled: Terminology"></a><h2 id="terminology" class="heading-anchor">Terminology</h2></div>
<p>To better understand Privileged Identity Management and its documentation, you should review the following terms.</p>
<div class="buttons buttons-right margin-bottom-none margin-top-sm"><!----> <button class="button button-clear button-sm display-flex gap-xxs">
<span class="icon" aria-hidden="true">
<span class="docon docon-expand color-primary"></span>
</span>
<span><!---->Expand table<!----></span>
</button><!----></div><div class="has-inner-focus"><table aria-label="Table 1" class="table table-sm margin-top-none">
<thead>
<tr>
<th>Term or concept</th>
<th>Role assignment category</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>eligible</td>
<td>Type</td>
<td>A role assignment that requires a user to perform one or more actions to use the role. If a user has been made eligible for a role, that means they can activate the role when they need to perform privileged tasks. There's no difference in the access given to someone with a permanent versus an eligible role assignment. The only difference is that some people don't need that access all the time.</td>
</tr>
<tr>
<td>active</td>
<td>Type</td>
<td>A role assignment that doesn't require a user to perform any action to use the role. Users assigned as active have the privileges assigned to the role.</td>
</tr>
<tr>
<td>activate</td>
<td></td>
<td>The process of performing one or more actions to use a role that a user is eligible for. Actions might include performing a multi-factor authentication (MFA) check, providing a business justification, or requesting approval from designated approvers.</td>
</tr>
<tr>
<td>assigned</td>
<td>State</td>
<td>A user that has an active role assignment.</td>
</tr>
<tr>
<td>activated</td>
<td>State</td>
<td>A user that has an eligible role assignment, performed the actions to activate the role, and is now active. Once activated, the user can use the role for a preconfigured period of time before they need to activate again.</td>
</tr>
<tr>
<td>permanent eligible</td>
<td>Duration</td>
<td>A role assignment where a user is always eligible to activate the role.</td>
</tr>
<tr>
<td>permanent active</td>
<td>Duration</td>
<td>A role assignment where a user can always use the role without performing any actions.</td>
</tr>
<tr>
<td>time-bound eligible</td>
<td>Duration</td>
<td>A role assignment where a user is eligible to activate the role only within start and end dates.</td>
</tr>
<tr>
<td>time-bound active</td>
<td>Duration</td>
<td>A role assignment where a user can use the role only within start and end dates.</td>
</tr>
<tr>
<td>just-in-time (JIT) access</td>
<td></td>
<td>A model in which users receive temporary permissions to perform privileged tasks, which prevents malicious or unauthorized users from gaining access after the permissions have expired. Access is granted only when users need it.</td>
</tr>
<tr>
<td>principle of least privilege access</td>
<td></td>
<td>A recommended security practice in which every user is provided with only the minimum privileges needed to accomplish the tasks they're authorized to perform. This practice minimizes the number of Global Administrators and instead uses specific administrator roles for certain scenarios.</td>
</tr>
</tbody>
</table></div>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#role-assignment-overview" aria-label="Section titled: Role assignment overview"></a><h2 id="role-assignment-overview" class="heading-anchor">Role assignment overview</h2></div>
<p>The PIM role assignments give you a secure way to grant access to resources in your organization. This section describes the assignment process. It includes assign roles to members, activate assignments, approve or deny requests, extend and renew assignments.</p>
<p>PIM keeps you informed by sending you and other participants <a href="pim-email-notifications" data-linktype="relative-path">email notifications</a>. These emails might also include links to relevant tasks, such activating, approve or deny a request.</p>
<p>The following screenshot shows an email message sent by PIM. The email informs Patti that Alex updated a role assignment for Emily.</p>
<p><img src="media/pim-configure/pim-email.png" alt="Screenshot shows an email message sent by Privileged Identity Management." data-linktype="relative-path"></p>
<div class="heading-wrapper" data-heading-level="h3"><a class="anchor-link docon docon-link" href="#assign" aria-label="Section titled: Assign"></a><h3 id="assign" class="heading-anchor">Assign</h3></div>
<p>The assignment process starts by assigning roles to members. To grant access to a resource, the administrator assigns roles to users, groups, service principals, or managed identities. The assignment includes the following data:</p>
<ul>
<li>The members or owners to assign the role.</li>
<li>The scope of the assignment. The scope limits the assigned role to a particular set of resources.</li>
<li>The type of the assignment
<ul>
<li><strong>Eligible</strong> assignments require the member of the role to perform an action to use the role. Actions might include activation, or requesting approval from designated approvers.</li>
<li><strong>Active</strong> assignments don't require the member to perform any action to use the role. Members assigned as active have the privileges assigned to the role.</li>
</ul>
</li>
<li>The duration of the assignment, using start and end dates or permanent. For eligible assignments, the members can activate or requesting approval during the start and end dates. For active assignments, the members can use the assign role during this period of time.</li>
</ul>
<p>The following screenshot shows how administrator assigns a role to members.</p>
<p><img src="media/pim-configure/role-assignment.png" alt="Screenshot of Privileged Identity Management role assignment." data-linktype="relative-path"></p>
<p>For more information, check out the following articles: <a href="pim-how-to-add-role-to-user" data-linktype="relative-path">Assign Microsoft Entra roles</a>, <a href="pim-resource-roles-assign-roles" data-linktype="relative-path">Assign Azure resource roles</a>, and <a href="groups-assign-member-owner" data-linktype="relative-path">Assign eligibility for a PIM for Groups</a></p>
<div class="heading-wrapper" data-heading-level="h3"><a class="anchor-link docon docon-link" href="#activate" aria-label="Section titled: Activate"></a><h3 id="activate" class="heading-anchor">Activate</h3></div>
<p>If users have been made eligible for a role, then they must activate the role assignment before using the role. To activate the role, users select specific activation duration within the maximum (configured by administrators), and the reason for the activation request.</p>
<p>The following screenshot shows how members activate their role to a limited time.</p>
<p><img src="media/pim-configure/role-activation.png" alt="Screenshot of Privileged Identity Management role activation." data-linktype="relative-path"></p>
<p>If the role requires <a href="pim-resource-roles-approval-workflow" data-linktype="relative-path">approval</a> to activate, a notification appears in the upper right corner of the user's browser informing them the request is pending approval. If an approval isn't required, the member can start using the role.</p>
<p>For more information, check out the following articles: <a href="pim-how-to-activate-role" data-linktype="relative-path">Activate Microsoft Entra roles</a>, <a href="pim-resource-roles-activate-your-roles" data-linktype="relative-path">Activate my Azure resource roles</a>, and <a href="groups-activate-roles" data-linktype="relative-path">Activate my PIM for Groups roles</a></p>
<div class="heading-wrapper" data-heading-level="h3"><a class="anchor-link docon docon-link" href="#approve-or-deny" aria-label="Section titled: Approve or deny"></a><h3 id="approve-or-deny" class="heading-anchor">Approve or deny</h3></div>
<p>Delegated approvers receive email notifications when a role request is pending their approval. Approvers can view, approve or deny these pending requests in PIM. After the request has been approved, the member can start using the role. For example, if a user or a group was assigned with Contribution role to a resource group, they are able to manage that particular resource group.</p>
<p>For more information, check out the following articles: <a href="pim-approval-workflow" data-linktype="relative-path">Approve or deny requests for Microsoft Entra roles</a>, <a href="pim-resource-roles-approval-workflow" data-linktype="relative-path">Approve or deny requests for Azure resource roles</a>, and <a href="groups-approval-workflow" data-linktype="relative-path">Approve activation requests for PIM for Groups</a></p>
<div class="heading-wrapper" data-heading-level="h3"><a class="anchor-link docon docon-link" href="#extend-and-renew-assignments" aria-label="Section titled: Extend and renew assignments"></a><h3 id="extend-and-renew-assignments" class="heading-anchor">Extend and renew assignments</h3></div>
<p>After administrators set up time-bound owner or member assignments, the first question you might ask is what happens if an assignment expires? In this new version, we provide two options for this scenario:</p>
<ul>
<li><strong>Extend</strong> – When a role assignment nears expiration, the user can use Privileged Identity Management to request an extension for the role assignment</li>
<li><strong>Renew</strong> – When a role assignment has already expired, the user can use Privileged Identity Management to request a renewal for the role assignment</li>
</ul>
<p>Both user-initiated actions require an approval from a Global Administrator or Privileged Role Administrator. Admins don't need to be in the business of managing assignment expirations. You can just wait for the extension or renewal requests to arrive for simple approval or denial.</p>
<p>For more information, check out the following articles: <a href="pim-how-to-renew-extend" data-linktype="relative-path">Extend or renew Microsoft Entra role assignments</a>, <a href="pim-resource-roles-renew-extend" data-linktype="relative-path">Extend or renew Azure resource role assignments</a>, and <a href="groups-renew-extend" data-linktype="relative-path">Extend or renew PIM for Groups assignments</a></p>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#scenarios" aria-label="Section titled: Scenarios"></a><h2 id="scenarios" class="heading-anchor">Scenarios</h2></div>
<p>Privileged Identity Management supports the following scenarios:</p>
<div class="heading-wrapper" data-heading-level="h3"><a class="anchor-link docon docon-link" href="#privileged-role-administrator-permissions" aria-label="Section titled: Privileged Role Administrator permissions"></a><h3 id="privileged-role-administrator-permissions" class="heading-anchor">Privileged Role Administrator permissions</h3></div>
<ul>
<li>Enable approval for specific roles</li>
<li>Specify approver users or groups to approve requests</li>
<li>View request and approval history for all privileged roles</li>
</ul>
<div class="heading-wrapper" data-heading-level="h3"><a class="anchor-link docon docon-link" href="#approver-permissions" aria-label="Section titled: Approver permissions"></a><h3 id="approver-permissions" class="heading-anchor">Approver permissions</h3></div>
<ul>
<li>View pending approvals (requests)</li>
<li>Approve or reject requests for role elevation (single and bulk)</li>
<li>Provide justification for my approval or rejection</li>
</ul>
<div class="heading-wrapper" data-heading-level="h3"><a class="anchor-link docon docon-link" href="#eligible-role-user-permissions" aria-label="Section titled: Eligible role user permissions"></a><h3 id="eligible-role-user-permissions" class="heading-anchor">Eligible role user permissions</h3></div>
<ul>
<li>Request activation of a role that requires approval</li>
<li>View the status of your request to activate</li>
<li>Complete your task in Microsoft Entra ID if activation was approved</li>
</ul>
<div class="heading-wrapper" data-heading-level="h2"><a class="anchor-link docon docon-link" href="#next-steps" aria-label="Section titled: Next steps"></a><h2 id="next-steps" class="heading-anchor">Next steps</h2></div>
<ul>
<li><a href="../licensing-fundamentals" data-linktype="relative-path">License requirements to use Privileged Identity Management</a></li>
<li><a href="../../identity/role-based-access-control/security-planning?toc=/azure/active-directory/privileged-identity-management/toc.json" data-linktype="relative-path">Securing privileged access for hybrid and cloud deployments in Microsoft Entra ID</a></li>
<li><a href="pim-deployment-plan" data-linktype="relative-path">Deploy Privileged Identity Management</a></li>
</ul>
</div>
<div id="assertive-live-region" role="alert" aria-live="assertive" class="visually-hidden" aria-relevant="additions" aria-atomic="true"></div>
<div id="polite-live-region" role="status" aria-live="polite" class="visually-hidden" aria-relevant="additions" aria-atomic="true"></div>
<!-- </content> -->
</main>
<!-- recommendations section -->
<!-- end recommendations section -->
<!-- feedback section -->
<section class="feedback-section position-relative" data-bi-name="feedback-section">
<h2 id="feedback" class="title is-3 margin-top-sm">Feedback</h2>
<div class="alert choose-feedback-type padding-bottom-sm">
<p id="send-feedback-about">Submit and view feedback for</p>
<div class="choose-feedback-buttons buttons margin-top-xs">
<a class="button has-external-link-indicator feedback-type-product" aria-label="Send feedback about this product" href="https://feedback.azure.com/d365community/forum/79b1327d-d925-ec11-b6e6-000d3a4f06a4" data-bi-name="product-feedback">
<span>This product</span>
</a>
<a class="button feedback-type-product github-link" aria-label="Send feedback about this page" data-bi-name="create-issue-on-github" href="https://github.com/MicrosoftDocs/entra-docs/issues/new?title=&body=%0A%0A%5BEnter%20feedback%20here%5D%0A%0A%0A---%0A%23%23%23%23%20Document%20Details%0A%0A%E2%9A%A0%20*Do%20not%20edit%20this%20section.%20It%20is%20required%20for%20learn.microsoft.com%20%E2%9E%9F%20GitHub%20issue%20linking.*%0A%0A*%20ID%3A%20d7338196-8434-f76e-ec0d-15bc85d51434%0A*%20Version%20Independent%20ID%3A%20c7003b7a-91f8-3727-0f3e-93f52f5809fa%0A*%20Content%3A%20%5BWhat%20is%20Privileged%20Identity%20Management%3F%20-%20Microsoft%20Entra%20ID%20Governance%5D(https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure)%0A*%20Content%20Source%3A%20%5Bdocs%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure.md%5D(https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fentra-docs%2Fblob%2Fmain%2Fdocs%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure.md)%0A*%20Service%3A%20**active-directory**%0A*%20Sub-service%3A%20**pim**%0A*%20GitHub%20Login%3A%20%40barclayn%0A*%20Microsoft%20Alias%3A%20**barclayn**">
<span class="icon" aria-hidden="true">
<span class="docon docon-brand-github"></span>
</span>
<span>This page</span>
</a>
</div>
</div>
<div class="action-container display-flex justify-content-flex-end margin-block-xxs">
<a class="view-on-github has-external-link-indicator" data-bi-name="view-on-github" href="https://github.com/MicrosoftDocs/entra-docs/issues?utf8=%E2%9C%93&q=%22c7003b7a-91f8-3727-0f3e-93f52f5809fa%22&in=body">
<span aria-hidden="true" class="docon docon-brand-github"></span>
<span>View all page feedback</span>
</a>
</div>
</section>
<!-- end feedback section -->
<!-- feedback report section -->
<!-- end feedback report section -->
<div id="ms--additional-resources-mobile" role="complementary" aria-label="Additional resources" class="display-none-desktop display-none-print">
<hr class="hr">
<h2 id="ms--additional-resources-mobile-heading" class="title is-3">Additional resources</h2>
<section id="right-rail-recommendations-mobile" data-bi-name="recommendations"><!---->
<hr class="hr display-none display-block-desktop">
<article class="margin-top-md margin-top-sm-desktop">
<p class="font-weight-semibold font-size-md display-flex align-items-center">
<span class="icon margin-right-xxs" aria-hidden="true">
<span class="docon docon-book-art64"></span>
</span>
Documentation
</p>
<div class="margin-top-xs ">
<ul aria-live="polite" aria-relevant="additions" id="right-rail-recommendations-list-0">
<!---->
<li class="padding-none margin-top-xs margin-bottom-none position-relative ">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-getting-started?source=recommendations" data-bi-name="right-rail-recommendation-item-0">
Start using PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to enable and get started using Privileged Identity Management (PIM) in the Microsoft Entra admin center.
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative ">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/azure/active-directory/privileged-identity-management/subscription-requirements?source=recommendations" data-bi-name="right-rail-recommendation-item-1">
License requirements to use Privileged Identity Management - Microsoft Entra
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Describes the licensing requirements to use Azure AD Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative ">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-deployment-plan?source=recommendations" data-bi-name="right-rail-recommendation-item-2">
Plan a Privileged Identity Management deployment
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to deploy Privileged Identity Management (PIM) in your Microsoft Entra organization.
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings?source=recommendations" data-bi-name="right-rail-recommendation-item-3">
Configure Microsoft Entra role settings in PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to configure Microsoft Entra role settings in Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-approval-workflow?source=recommendations" data-bi-name="right-rail-recommendation-item-4">
Approve or deny requests for Microsoft Entra roles in PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to approve or deny requests for Microsoft Entra roles in Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/identity-governance-overview?source=recommendations" data-bi-name="right-rail-recommendation-item-5">
Microsoft Entra ID Governance
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Microsoft Entra ID Governance allows you to balance your organization's need for security and employee productivity with the right processes and visibility.
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-how-to-add-role-to-user?source=recommendations" data-bi-name="right-rail-recommendation-item-6">
Assign Microsoft Entra roles in PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to assign Microsoft Entra roles in Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/identity/role-based-access-control/best-practices?source=recommendations" data-bi-name="right-rail-recommendation-item-7">
Best practices for Microsoft Entra roles
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Best practices for using Microsoft Entra roles.
</p>
</li>
<!---->
</ul>
</div>
<!---->
<button type="button" aria-expanded="false" data-show-more="" class="link-button font-weight-semibold font-size-sm margin-top-sm" aria-controls="right-rail-recommendations-list-0" data-title="Show 5 more" data-bi-name="show-more-btn">
<span class="show-more-text "><!---->Show 5 more<!----></span>
</button>
<!---->
</article>
<!----></section>
<section id="right-rail-training-mobile" data-bi-name="learning-resources-card"><!---->
<hr class="hr display-none display-block-desktop">
<article class="margin-top-md margin-top-sm-desktop">
<p class="font-weight-semibold font-size-md display-flex align-items-center">
<span class="icon margin-right-xxs" aria-hidden="true">
<span class="docon docon-cube-cone-ball-shapes"></span>
</span>
Training
</p>
<div class="margin-top-xs position-relative">
<!---->
<div class="position-relative margin-top-xs">
<p class="has-line-height-reset color-text-subtle font-size-xs font-weight-semibold">
Module
</p>
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/training/modules/plan-implement-privileged-access/?source=recommendations">
Plan and implement privileged access - Training
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Ensuring that administrative roles are protected and managed to increase your Azure solution security is a must. Explore how to use PIM to protect your data and resources.
</p>
</div>
<!---->
<div class="position-relative margin-top-sm">
<p class="has-line-height-reset color-text-subtle font-size-xs font-weight-semibold">
Certification
</p>
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/certifications/identity-and-access-administrator/?source=recommendations">
Microsoft Certified: Identity and Access Administrator Associate - Certifications
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
The Microsoft identity and access administrator designs, implements, and operates an organization’s identity and access management systems by using Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra. They configure and manage authentication and authorization of identities for users, devices, Azure resources, and applications.
</p>
</div>
<!---->
</div>
</article>
<!----></section>
<section id="right-rail-events-mobile" data-bi-name="events-card" hidden=""></section>
<section id="right-rail-qna-mobile" data-bi-name="qna-link-card" hidden=""></section>
</div>
<div class="border-top is-visible-interactive has-default-focus margin-top-sm ">
<footer id="footer-interactive" data-bi-name="footer" class="footer-layout">
<div class="display-flex gap-xs flex-wrap-wrap is-full-height padding-right-lg-desktop">
<a data-mscc-ic="false" class="locale-selector-link button button-sm button-clear flex-shrink-0" href="/en-us/locale?target=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure" data-bi-name="select-locale" aria-label="Content language selector. Currently set to English (United States).">
<span class="icon" aria-hidden="true">
<span class="docon docon-world"></span>
</span>
<span class="local-selector-link-text">English (United States)</span></a>
<div class="flex-shrink-0">
<div class="dropdown has-caret-up">
<button class="dropdown-trigger button button-clear button-sm has-inner-focus theme-dropdown-trigger" aria-controls="theme-menu-interactive" aria-expanded="false" title="Theme" data-bi-name="theme">
<span class="icon">
<span class="docon docon-sun" aria-hidden="true"></span>
</span>
<span>Theme</span>
<span class="icon expanded-indicator" aria-hidden="true">
<span class="docon docon-chevron-down-light"></span>
</span>
</button>
<div class="dropdown-menu" id="theme-menu-interactive" role="menu">
<ul class="theme-selector padding-xxs" role="none">
<li class="theme display-block" role="menuitem">
<button class="button button-clear button-sm theme-control button-block justify-content-flex-start is-selected" data-theme-to="light" aria-pressed="true">
<span class="theme-light margin-right-xxs">
<span class="theme-selector-icon css-variable-support border display-inline-block has-body-background" aria-hidden="true">
<svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14">
<rect width="22" height="14" class="has-fill-body-background"></rect>
<rect x="5" y="5" width="12" height="4" class="has-fill-secondary"></rect>
<rect x="5" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="8" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="11" y="2" width="3" height="1" class="has-fill-secondary"></rect>
<rect x="1" y="1" width="2" height="2" class="has-fill-secondary"></rect>
<rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary"></rect>
<rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary"></rect>
</svg>
</span>
</span>
<span>
Light </span>
</button>
</li>
<li class="theme display-block" role="menuitem">
<button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="dark" aria-pressed="false">
<span class="theme-dark margin-right-xxs">
<span class="border theme-selector-icon css-variable-support display-inline-block has-body-background" aria-hidden="true">
<svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14">
<rect width="22" height="14" class="has-fill-body-background"></rect>
<rect x="5" y="5" width="12" height="4" class="has-fill-secondary"></rect>
<rect x="5" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="8" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="11" y="2" width="3" height="1" class="has-fill-secondary"></rect>
<rect x="1" y="1" width="2" height="2" class="has-fill-secondary"></rect>
<rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary"></rect>
<rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary"></rect>
</svg>
</span>
</span>
<span>
Dark </span>
</button>
</li>
<li class="theme display-block" role="menuitem">
<button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="high-contrast" aria-pressed="false">
<span class="theme-high-contrast margin-right-xxs">
<span class="border theme-selector-icon css-variable-support display-inline-block has-body-background" aria-hidden="true">
<svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14">
<rect width="22" height="14" class="has-fill-body-background"></rect>
<rect x="5" y="5" width="12" height="4" class="has-fill-secondary"></rect>
<rect x="5" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="8" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="11" y="2" width="3" height="1" class="has-fill-secondary"></rect>
<rect x="1" y="1" width="2" height="2" class="has-fill-secondary"></rect>
<rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary"></rect>
<rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary"></rect>
</svg>
</span>
</span>
<span>
High contrast </span>
</button>
</li>
</ul>
</div>
</div>
</div>
</div>
<ul class="links" data-bi-name="footerlinks">
<li class="manage-cookies-holder" hidden=""></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/previous-versions/" data-bi-name="archivelink">Previous Versions</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="https://techcommunity.microsoft.com/t5/microsoft-learn-blog/bg-p/MicrosoftLearnBlog" data-bi-name="bloglink">Blog</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/contribute/" data-bi-name="contributorGuide">Contribute</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="https://go.microsoft.com/fwlink/?LinkId=521839" data-bi-name="privacy">Privacy</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/legal/termsofuse" data-bi-name="termsofuse">Terms of Use</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="https://www.microsoft.com/legal/intellectualproperty/Trademarks/" data-bi-name="trademarks">Trademarks</a></li>
<li>© Microsoft 2023</li>
</ul>
</footer>
</div>
</div>
<div id="ms--additional-resources" class="right-container column is-4-desktop display-none display-block-desktop" data-bi-name="pageactions" role="complementary" aria-label="Additional resources">
<div id="affixed-right-container" class="margin-top-sm-tablet position-sticky" data-bi-name="right-column" style="top: 36px; bottom: 36px;">
<h2 id="ms--additional-resources-heading" class="title is-6 margin-top-md">Additional resources</h2>
<section id="right-rail-events" data-bi-name="events-card" hidden=""></section>
<section id="right-rail-training" data-bi-name="learning-resources-card"><!---->
<hr class="hr display-none display-block-desktop">
<article class="margin-top-md margin-top-sm-desktop">
<p class="font-weight-semibold font-size-md display-flex align-items-center">
<span class="icon margin-right-xxs" aria-hidden="true">
<span class="docon docon-cube-cone-ball-shapes"></span>
</span>
Training
</p>
<div class="margin-top-xs position-relative">
<!---->
<div class="position-relative margin-top-xs">
<p class="has-line-height-reset color-text-subtle font-size-xs font-weight-semibold">
Module
</p>
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/training/modules/plan-implement-privileged-access/?source=recommendations">
Plan and implement privileged access - Training
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Ensuring that administrative roles are protected and managed to increase your Azure solution security is a must. Explore how to use PIM to protect your data and resources.
</p>
</div>
<!---->
<div class="position-relative margin-top-sm">
<p class="has-line-height-reset color-text-subtle font-size-xs font-weight-semibold">
Certification
</p>
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/certifications/identity-and-access-administrator/?source=recommendations">
Microsoft Certified: Identity and Access Administrator Associate - Certifications
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
The Microsoft identity and access administrator designs, implements, and operates an organization’s identity and access management systems by using Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra. They configure and manage authentication and authorization of identities for users, devices, Azure resources, and applications.
</p>
</div>
<!---->
</div>
</article>
<!----></section>
<section id="right-rail-recommendations" data-bi-name="recommendations"><!---->
<hr class="hr display-none display-block-desktop">
<article class="margin-top-md margin-top-sm-desktop">
<p class="font-weight-semibold font-size-md display-flex align-items-center">
<span class="icon margin-right-xxs" aria-hidden="true">
<span class="docon docon-book-art64"></span>
</span>
Documentation
</p>
<div class="margin-top-xs ">
<ul aria-live="polite" aria-relevant="additions" id="right-rail-recommendations-list-1">
<!---->
<li class="padding-none margin-top-xs margin-bottom-none position-relative ">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-getting-started?source=recommendations" data-bi-name="right-rail-recommendation-item-0">
Start using PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to enable and get started using Privileged Identity Management (PIM) in the Microsoft Entra admin center.
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative ">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/azure/active-directory/privileged-identity-management/subscription-requirements?source=recommendations" data-bi-name="right-rail-recommendation-item-1">
License requirements to use Privileged Identity Management - Microsoft Entra
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Describes the licensing requirements to use Azure AD Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative ">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-deployment-plan?source=recommendations" data-bi-name="right-rail-recommendation-item-2">
Plan a Privileged Identity Management deployment
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to deploy Privileged Identity Management (PIM) in your Microsoft Entra organization.
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings?source=recommendations" data-bi-name="right-rail-recommendation-item-3">
Configure Microsoft Entra role settings in PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to configure Microsoft Entra role settings in Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-approval-workflow?source=recommendations" data-bi-name="right-rail-recommendation-item-4">
Approve or deny requests for Microsoft Entra roles in PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to approve or deny requests for Microsoft Entra roles in Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/identity-governance-overview?source=recommendations" data-bi-name="right-rail-recommendation-item-5">
Microsoft Entra ID Governance
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Microsoft Entra ID Governance allows you to balance your organization's need for security and employee productivity with the right processes and visibility.
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/id-governance/privileged-identity-management/pim-how-to-add-role-to-user?source=recommendations" data-bi-name="right-rail-recommendation-item-6">
Assign Microsoft Entra roles in PIM
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Learn how to assign Microsoft Entra roles in Privileged Identity Management (PIM).
</p>
</li>
<!---->
<li class="padding-none margin-top-sm margin-bottom-none position-relative expandable">
<p class="line-clamp-3">
<a class="display-block inner-focus font-weight-semibold font-size-sm has-line-height-reset stretched-link" href="/en-us/entra/identity/role-based-access-control/best-practices?source=recommendations" data-bi-name="right-rail-recommendation-item-7">
Best practices for Microsoft Entra roles
</a>
</p>
<p class="font-size-sm has-line-height-reset color-text-subtle margin-top-xxs line-clamp-3">
Best practices for using Microsoft Entra roles.
</p>
</li>
<!---->
</ul>
</div>
<!---->
<button type="button" aria-expanded="false" data-show-more="" class="link-button font-weight-semibold font-size-sm margin-top-sm" aria-controls="right-rail-recommendations-list-1" data-title="Show 5 more" data-bi-name="show-more-btn">
<span class="show-more-text "><!---->Show 5 more<!----></span>
</button>
<!---->
</article>
<!----></section>
<nav id="side-doc-outline" class="doc-outline" data-bi-name="intopic toc" role="navigation" aria-label="In this article">
<h3>In this article</h3>
</nav>
<section id="right-rail-qna" class="margin-top-xxs" data-bi-name="qna-link-card" hidden=""></section>
</div>
</div>
</div>
<!--end of div.columns -->
</section>
<!--end of .primary-holder -->
<!-- interactive container -->
<aside id="interactive-container" class="interactive-container is-visible-interactive column has-body-background-dark ">
</aside>
<!-- end of interactive container -->
</div>
</div>
<!--end of .mainContainer -->
<section class="border-top has-default-focus is-hidden-interactive margin-top-sm ">
<footer id="footer" data-bi-name="footer" class="footer-layout uhf-container has-padding" role="contentinfo">
<div class="display-flex gap-xs flex-wrap-wrap is-full-height padding-right-lg-desktop">
<a data-mscc-ic="false" class="locale-selector-link button button-sm button-clear flex-shrink-0" href="/en-us/locale?target=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fentra%2Fid-governance%2Fprivileged-identity-management%2Fpim-configure" data-bi-name="select-locale" aria-label="Content language selector. Currently set to English (United States).">
<span class="icon" aria-hidden="true">
<span class="docon docon-world"></span>
</span>
<span class="local-selector-link-text">English (United States)</span></a>
<div class="flex-shrink-0">
<div class="dropdown has-caret-up">
<button class="dropdown-trigger button button-clear button-sm has-inner-focus theme-dropdown-trigger" aria-controls="theme-menu" aria-expanded="false" title="Theme" data-bi-name="theme">
<span class="icon">
<span class="docon docon-sun" aria-hidden="true"></span>
</span>
<span>Theme</span>
<span class="icon expanded-indicator" aria-hidden="true">
<span class="docon docon-chevron-down-light"></span>
</span>
</button>
<div class="dropdown-menu" id="theme-menu" role="menu">
<ul class="theme-selector padding-xxs" role="none">
<li class="theme display-block" role="menuitem">
<button class="button button-clear button-sm theme-control button-block justify-content-flex-start is-selected" data-theme-to="light" aria-pressed="true">
<span class="theme-light margin-right-xxs">
<span class="theme-selector-icon css-variable-support border display-inline-block has-body-background" aria-hidden="true">
<svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14">
<rect width="22" height="14" class="has-fill-body-background"></rect>
<rect x="5" y="5" width="12" height="4" class="has-fill-secondary"></rect>
<rect x="5" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="8" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="11" y="2" width="3" height="1" class="has-fill-secondary"></rect>
<rect x="1" y="1" width="2" height="2" class="has-fill-secondary"></rect>
<rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary"></rect>
<rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary"></rect>
</svg>
</span>
</span>
<span>
Light </span>
</button>
</li>
<li class="theme display-block" role="menuitem">
<button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="dark" aria-pressed="false">
<span class="theme-dark margin-right-xxs">
<span class="border theme-selector-icon css-variable-support display-inline-block has-body-background" aria-hidden="true">
<svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14">
<rect width="22" height="14" class="has-fill-body-background"></rect>
<rect x="5" y="5" width="12" height="4" class="has-fill-secondary"></rect>
<rect x="5" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="8" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="11" y="2" width="3" height="1" class="has-fill-secondary"></rect>
<rect x="1" y="1" width="2" height="2" class="has-fill-secondary"></rect>
<rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary"></rect>
<rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary"></rect>
</svg>
</span>
</span>
<span>
Dark </span>
</button>
</li>
<li class="theme display-block" role="menuitem">
<button class="button button-clear button-sm theme-control button-block justify-content-flex-start" data-theme-to="high-contrast" aria-pressed="false">
<span class="theme-high-contrast margin-right-xxs">
<span class="border theme-selector-icon css-variable-support display-inline-block has-body-background" aria-hidden="true">
<svg class="svg" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 22 14">
<rect width="22" height="14" class="has-fill-body-background"></rect>
<rect x="5" y="5" width="12" height="4" class="has-fill-secondary"></rect>
<rect x="5" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="8" y="2" width="2" height="1" class="has-fill-secondary"></rect>
<rect x="11" y="2" width="3" height="1" class="has-fill-secondary"></rect>
<rect x="1" y="1" width="2" height="2" class="has-fill-secondary"></rect>
<rect x="5" y="10" width="7" height="2" rx="0.3" class="has-fill-primary"></rect>
<rect x="19" y="1" width="2" height="2" rx="1" class="has-fill-secondary"></rect>
</svg>
</span>
</span>
<span>
High contrast </span>
</button>
</li>
</ul>
</div>
</div>
</div>
</div>
<ul class="links" data-bi-name="footerlinks">
<li class="manage-cookies-holder" hidden=""></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/previous-versions/" data-bi-name="archivelink">Previous Versions</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="https://techcommunity.microsoft.com/t5/microsoft-learn-blog/bg-p/MicrosoftLearnBlog" data-bi-name="bloglink">Blog</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/contribute/" data-bi-name="contributorGuide">Contribute</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="https://go.microsoft.com/fwlink/?LinkId=521839" data-bi-name="privacy">Privacy</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="/en-us/legal/termsofuse" data-bi-name="termsofuse">Terms of Use</a></li>
<li><a class="external-link-indicator" data-mscc-ic="false" href="https://www.microsoft.com/legal/intellectualproperty/Trademarks/" data-bi-name="trademarks">Trademarks</a></li>
<li>© Microsoft 2023</li>
</ul>
</footer>
</section>
<div id="action-panel" role="region" aria-label="Action Panel" class="action-panel has-default-focus" tabindex="-1"></div>
<script src="https://learn.microsoft.com/static/third-party/adobe-target/at-js/2.9.0/at.js" async="" defer="" integrity="sha384-1/viVM50hgc33O2gOgkWz3EjiD/Fy/ld1dKYXJRUyjNYVEjSUGcSN+iPiQF7e4cu" crossorigin="anonymous"></script></body></html>
