Understanding Entra ID Privileged Identity Management

Entra ID Privileged Identity Management (PIM) can help organizations manage, control, and audit use by administrators of Entra ID itself, as well as other Microsoft hosted services like Microsoft 365 and Intune. In particular, PIM provides an audit trail for most administrative roles of Microsoft hosted services. This information could help minimize the risk posed by a set of lost administrative credentials and also give insight into the actions of a rogue administrator. PIM is a key feature in Entra ID P2 and higher User Subscription Licenses (SLs).

What Is Privileged Identity Management?

PIM is an Entra ID feature that provides just-in-time (JIT) management of administrative credentials used with Entra ID, Microsoft 365, and Intune.

PIM can help organizations understand administrative activity occurring in their Microsoft hosted services, maintain compliance with industry and geographic standards, and potentially reduce the number of administrators required.

In a traditional scenario, the rights granted by roles and privileges of administrators who are not managed by PIM are always fully enabled, which poses a potential security risk.