Analyzing PIM audit history and reports
A key benefit to utilizing PIM is the ability to audit the use of privileged access to administrator roles. Since the activation of a PIM role requires justification, this creates an audit history that you can review and create reports to review.
You can access this history and create your reports from the Activity menu of Privileged Identity Management by choosing Resource audit, as shown in Figure 13.24:
Figure 13.24 – Resource audit
From this tile, you can sort by users and filter the information for different time spans and requestor information. You can export the results to provide reports to management. Additional information can be found at this link: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-email-notifications#weekly-privileged-identity-management-digest-email-for-azure-ad-roles.
Next, we will provide a summary of what was discussed in this chapter...
