Privileged Identity Management (PIM)
PIM is a Microsoft Entra ID Governance feature that provides time-based and approval-based activation of privileged roles to limit standing administrative access.
Privileged Identity Management is a Microsoft Entra ID Governance feature that eliminates permanently assigned (“standing”) access to sensitive roles such as Global Administrator or SharePoint Administrator. Instead of holding a role continuously, an eligible user must consciously activate it, typically supplying a justification, completing multifactor authentication, or waiting for an approver’s sign-off. The role then expires automatically after a configurable time-bound window. A critical exam distinction is eligible versus active assignments: an active assignment grants the role immediately with no activation step, while eligible assignments are the core just-in-time PIM control. This also matters for Copilot scenarios, since agents and connectors stay bound by the same Entra ID role boundaries PIM governs.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →