Page Comparison

...

1. Navigate to https://entra.microsoft.com and login with your NetIDAdmin account

2. Expand the Identity Governance section and click on Privileged Identity Management (PIM)

   1. Optionally pin PIM as a favorite by clicking the star icon to the right of its entry.

      Image RemovedImage Added

3. Click on Groups under the Manage section on the left-hand side

   

4. Click on the PIM group you manage for your area, select My Roles in the Tasks section, then Activate your owner role within the Eligible assignments section

   Image RemovedImage Added

5. Specify a duration, provide a short justification, and click Activate. Once activated, you can manage the group to add/remove other eligible assignments or extend existing assignments using the steps below.

   Image AddedImage Removed

Adding Additional Assignments

1. To grant another user the ability to activate the admin roles associated with your PIM group, navigate to PIM Groups and click on the respective group

2. Navigate to Assignments in the Manage section, click the Eligible assignments tab and click Add assignments

   

3. Select Member as the role, choose the user(s) to grant this assignment and click next

   

4. Ensure the assignment type is Eligible and specify a duration (max 1 year)
   

   

5. The selected user(s) will now be eligible members and can activate their admin roles by following Activating "Just in Time" Microsoft Admin Roles via Privileged Identity Management (PIM)

   

Extending Existing Eligible Assignments

1. Navigate to PIM Groups and click on the respective group

2. Click on Assignments within the Manage section, click the Eligible assignments tab, and click Update on the expiring assignment you’d like to extend

   Image Added

3. Specify the new assignment end date and click Save

   Image Added

Related Pages