Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Introduction

 

Azure Active Directory (Azure AD) Privileged Identity Management (PIM) enables you to confine standing executive access to special privileged roles, find who approaches, and review privileged access.

 

With Azure Active Directory (Azure AD) Privileged Identity Management (PIM), you can oversee, control, and monitor access inside your association. This extension incorporates access to Azure resources, Azure AD and other Microsoft online administrations like Office 365 or Microsoft Intune.

 

Enable PIM

1. Sign in to the Azure portal as a Global Administrator of your directory.

• You should be a Global Administrator with an authoritative account (for example, @yourdomain.com), not a Microsoft account (for example, @outlook.com), to enable PIM for a registry.

2. Click All services and search the Azure AD Privileged Identity Management service. And open that.
   
   
   

3. Click to open the Privileged Identity Management (PIM).
   
   
   

4. After that, in the list, click Consent to Privileged Identity Management (PIM).
   
   
   

5. Then, Click Verify my identity to verify your identity with Azure MFA. You'll be asked to pick an account.
   
   
   

6. After that, if more information is required for confirmation, you'll be guided through the procedure.
   
   
   
   For example, you may be asked to provide phone verification check. Just fill out information then click to Next.
   
   
   
   After that, click Next. Microsoft sends a verification code on your mobile phone.
   
   
   
   Then, enter the verification code. Next, click the Verify button.
   
   
   
   Status check completed.
   
   
   

7. Once you have completed the verification process, click the Consent button.

8. Click Yes to consent to the PIM service.
   
   
   

Sign up PIM for Azure AD roles

 

When you have enabled PIM for your directory, you'll have to sign up PIM to manage Azure AD jobs.

1. Open Azure AD Privileged Identity Management.
2. Click Azure AD roles.
   
   
   

3. Click Sign up.

4. In the message that appears, click Yes to sign up PIM to manage Azure AD roles.
   
   
   

At the point when signing up finishes, the Azure AD alternatives will be enabled. You may need to refresh the portal.

 

Once PIM is set up, you can perform your identity management tasks.

 

 

 

Summary

 

In this article, we learned about Azure Active Directory (Azure AD) Privileged Identity Management (PIM). In my next article, I will cover the next step of this series.