Planning, configuring, and monitoring PIM
Azure AD Privileged Identity Management (PIM) enables you to take greater control of your privileged accounts within Azure AD. So, what exactly is a privileged account? Essentially, this is any user account within your Microsoft 365 environment that grants elevated privileges above the scope of a standard user.
By default, Microsoft 365 standard user accounts are created without any sort of administrative privileges. However, it may be necessary to grant certain users elevated privileges to be able to carry out their jobs. There are a number of built-in administrator roles within Microsoft 365 for this, including the following:
- Billing Administrator
- Exchange Administrator
- Global Administrator
- Helpdesk Administrator
- Service Administrator
- SharePoint Administrator
- Teams Administrator
- User Administrator
Important note
The preceding roles are the core admin roles in Microsoft 365. There are others available,...