Privileged Identity Management
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit b005a9a · +5 −5 lines · also on GitHub
⋯ 51 unchanged lines
5252
5353
Once you set up Privileged Identity Management, you'll see **Tasks**, **Manage**, and **Activity** options in the left navigation menu. As an administrator, you can choose between options such as managing **Microsoft Entra roles**, managing **Azure resource** roles, or PIM for Groups. When you choose what you want to manage, you see the appropriate set of options for that option.
5454
55
−
55
+:::image type="content" source="./media/pim-configure/pim-quickstart.png" alt-text="Screenshot of Privileged Identity Management in the Azure portal.":::
5656
5757
## Who can do what?
5858
⋯ 27 unchanged lines
8686
8787
The following screenshot shows an email message sent by PIM. The email informs Patti that Alex updated a role assignment for Emily.
8888
89
−
89
+:::image type="content" source="./media/pim-configure/pim-email.png" alt-text="Screenshot shows an email message sent by Privileged Identity Management.":::
9090
9191
### Assign
9292
⋯ 8 unchanged lines
101101
102102
The following screenshot shows how administrator assigns a role to members.
103103
104
−
104
+:::image type="content" source="./media/pim-configure/role-assignment.png" alt-text="Screenshot of Privileged Identity Management role assignment.":::
105105
106106
107107
For more information, check out the following articles: [Assign Microsoft Entra roles](pim-how-to-add-role-to-user.md), [Assign Azure resource roles](pim-resource-roles-assign-roles.md), and [Assign eligibility for a PIM for Groups](groups-assign-member-owner.md)
⋯ 4 unchanged lines
112112
113113
The following screenshot shows how members activate their role to a limited time.
114114
115
−
115
+:::image type="content" source="./media/pim-configure/role-activation.png" alt-text="Screenshot of Privileged Identity Management role activation.":::
116116
117117
If the role requires [approval](pim-resource-roles-approval-workflow.md) to activate, a notification appears in the upper right corner of the user's browser informing them the request is pending approval. If an approval isn't required, the member can start using the role.
118118
119
−For more information, check out the following articles: [Activate Microsoft Entra roles](pim-how-to-activate-role.yml), [Activate my Azure resource roles](pim-resource-roles-activate-your-roles.yml), and [Activate my PIM for Groups roles](groups-activate-roles.md)
119
+For more information, check out the following articles: [Activate Microsoft Entra roles](pim-how-to-activate-role.md), [Activate my Azure resource roles](pim-resource-roles-activate-your-roles.md), and [Activate my PIM for Groups roles](groups-activate-roles.md)
120120
121121
### Approve or deny
122122
⋯ 48 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 06:04 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.