Privileged Identity Management (PIM): eligible vs active assignments, activation settings, approval, alerts

Standing privilege, where admins hold powerful roles all the time, means that any compromise of an admin account immediately gives an attacker those powers. Microsoft Entra Privileged Identity Management (PIM) reduces that risk with just-in-time access: admins hold roles only when they need them, for a limited time, with checks along the way. PIM requires Microsoft Entra ID P2 or Microsoft Entra ID Governance licensing for the users who benefit from it.