Forum Discussion

Qonnect's avatar
Qonnect
Tin Contributor
Jul 07, 2025

Adding PIM enabled security group to an Access Package

Hi,

Recently a new feature has gone in preview, it's now possible to add PIM enabled security group to an access package.

explained here: 

https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-access-package-eligible

I followed the instruction exactly on 2 different tenants, one tenant has Entra ID Governance licence, another has the Entra Suite licence. 
The result on both tenants was the same. 

When adding a PIM enabled group to an access package.
I am presented only with 2 roles (member or owner) and not with the expected 4 roles. (member, owner, eligible member, eligible owner).
The group I add is created for test purpose couple of weeks ago, and really is PIM enabled (discovered ).

Is this a preview that has to be activated on a tenant?
(its not in the "Entra -> Identity -> settings -> Preview features" list).

Am i missing something?

Cheers!

1 Reply

  • This isn't controlled by a tenant-level preview setting. If your group is already PIM-enabled and you've met the documented prerequisites, the additional Eligible member and Eligible owner options should appear automatically.

    If you're only seeing Member and Owner, it's most likely because the feature hasn't been enabled for your tenant yet. Since it's a preview feature, Microsoft is rolling it out gradually, and not all tenants receive preview capabilities at the same time, even if they have the required licenses.

    There isn't a manual switch under Entra > Identity > Settings > Preview features to enable this functionality. At this point, the only thing you can do is wait for the rollout to reach your tenant or open a Microsoft support case to verify whether the preview has been enabled for your tenant.

    If this resolves your issue, please consider marking the answer as the solution so it can help others facing the same problem.