Entra PIM Role Activation
# Ensure necessary modules are installed $modules = @("DCToolbox", "Microsoft.Entra") foreach ($module in $modules) { if (-not (Get-Module -ListAvailable -Name $module)) { Install-Module -Name $module -Repository PSGallery -Scope CurrentUser -Force -AllowClobber } } # Check if msal.ps package is installed if (-not (Get-Package -Name msal.ps -ErrorAction SilentlyContinue)) { Install-Package msal.ps -Force -Confirm:$false } # Ensure Entra Authentication module is properly imported Remove-Module Microsoft.Entra.Authentication -ErrorAction SilentlyContinue Import-Module Microsoft.Entra.Authentication -Force # Connect to Entra ID with proper authentication Connect-Entra Add-Type -AssemblyName System.Windows.Forms # Create GUI Form $form = New-Object System.Windows.Forms.Form $form.Text = "EntraPIMRole Activation" $form.Size = New-Object System.Drawing.Size(350, 350) # Create Checkboxes $checkboxes = @() $labels = @("Global Administrator", "Teams Administrator", "SharePoint Administrator", "Exchange Administrator", "Billing Administrator") for ($i = 0; $i -lt $labels.Count; $i++) { $checkbox = New-Object System.Windows.Forms.CheckBox $checkbox.Text = $labels[$i] $checkbox.AutoSize = $true $checkbox.Width = 250 $checkbox.Location = New-Object System.Drawing.Point(20, (20 + ($i * 30))) $checkboxes += $checkbox $form.Controls.Add($checkbox) } # Create TextBox $textBox = New-Object System.Windows.Forms.TextBox $textBox.Location = New-Object System.Drawing.Point(20, 180) $textBox.Size = New-Object System.Drawing.Size(300, 20) $form.Controls.Add($textBox) # Create Button $button = New-Object System.Windows.Forms.Button $button.Text = "Run" $button.Location = New-Object System.Drawing.Point(20, 220) $button.Size = New-Object System.Drawing.Size(80, 30) $button.Add_Click({ $selectedOptions = $checkboxes | Where-Object { $_.Checked } | ForEach-Object { $_.Text } $inputText = $textBox.Text # Verify if the required function exists before executing if (Get-Command -Name Enable-DCEntraIDPIMRole -ErrorAction SilentlyContinue) { Enable-DCEntraIDPIMRole -RolesToActivate $selectedOptions -UseMaximumTimeAllowed -Reason $inputText [System.Windows.Forms.MessageBox]::Show("Activated Roles: $($selectedOptions -join ', ')`nReason: $inputText") } else { [System.Windows.Forms.MessageBox]::Show("Error: Enable-DCEntraIDPIMRole function not found. Ensure the correct module is installed.") } }) $form.Controls.Add($button) # Show Form $form.ShowDialog() Im trying to create a script so i can activate PIM with logon to the azure portal. But for some reason i cant get it to work. Can you all please help me out.
Azure Eligible Owner (PIM) Notifications
How do we request a feature change on vast amount of emails sent to Subscription Owners that dont have Owner but eligible Owner . My inbox is flooded so much that I have to send them straight to the trash, and then when an email comes that's important such as PIM role expiration I never see it.Azure Privileged Identity Management - Cartoon explanation
- You are a Cloud lover? - But you prefer Azure? - Learning with fun? - And most of all, a big fan Leat Privileges concept? Maybe you'll like our last Azure Privileged Identity Management comic provided by Jules&Léa. 🥰 If you want to deep dive, do not hesitate to visit the official Microsoft documentation: https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure?WT.mc_id=AZ-MVP-5005062 ++
Turn on O365 alerting when Admin role is activated?
Hi all 🙂 I am wondering how I turn on alerts when a role is activated through O365 rather than Azure AD. I have PIM setup for Azure AD, but when an Admin role is assigned/activated through the O365 portal, then I do not receive an alert. Any and all help is appreciated 🙂
Receive an email alert when a D365 CE privilege was created, changed, deleted, or assigned
Hello everyone. I hope everybody is going to be well. I am looking for a solution to be alerted when one of my analysts makes a change in privileges of Dynamics 365 Customer Engagement. I was very close to achieving this, setting D365 app, but I can't find the exact action which represents a privileged event as described in the subject. Tell me if need any other additional information. Any help will be much appreciated!
