Implementing and managing Privileged Access Management
With Microsoft Purview PAM, it is possible to configure access control to privileged Microsoft 365 admin tasks in a granular fashion. The purpose of this is to protect your organization from any possible breaches that use existing privileged admin accounts that have existing access to settings or data.
By implementing PAM, your organization can require that your users must explicitly request just-in-time access to complete any privileged or elevated tasks. This enforces the principle of providing users with just enough access to complete their tasks. Doing so significantly reduces the risk of data exposure.
To use PAM in your organization, one of the following subscriptions is required:
- Microsoft 365 E5
- Microsoft 365 E3 and the Microsoft 365 E5 Compliance add-on
- Office 365 E3, Enterprise Mobility and Security E3, and the Microsoft 365 E5 Compliance add-on
- Any Microsoft 365, Office 365, Exchange, SharePoint...
