PAL with PIM

Hi Jill, my original message was in October, that's 3 months ago, that's enough time for a new Windows release.... so...
As I said, I understand how important is ACR for Microsoft, as well as a how important is "PAL" mostly for the Microsoft PDMs (the people who manage the accounts/partners) as this is their main KPI, as well to the partners, to be able to show to Microsoft the influence they have on the customers they work on.
Having said that... every enterprise customer, uses PIM ... so every account we as a partner get on a customer will mostly have PIM ... so, no privileged permanent permissions at all, just in time activation when needed to do an elevated task .... meaning that even if we put the Partner ID / PAL on this account, the account is not privileged enough for Microsoft to count the ACR towards the parter, except that for a miracle the metric is taken in the moment the account is elevated.

So, you understand how difficult is to get the real influence of a partner in a customer when every big customer use PIM, but the method Microsoft uses to gather this metrics does not support PIM, is like... an implementation that worked many years ago, but today, with Zero Trust everywhere and all security measures (following own Microsoft recommendations), this approach is not working as expected.

So I wish we can get an official step by step documentation from Microsoft, on "How to implement PAL in today's enterprise environments, by following Microsoft security best practices".

If this is not possible, maybe PAL is just outdated and need to be replaced with something new, maybe an implementation similar to DPOR implementation, but that allows multiple values on a subscription, where multiple partners (typical on enterprises) can put a Partner ID on a subscription, to get the ACR counted towards their influence. I don't know... but you need to have a fix for this.