Configuring Azure AD PIM
This recipe shows how to get the most out of Azure AD Privileged Identity Management (PIM).
Getting ready
To complete this recipe, sign in to Azure AD with an account that has the Global administrator role assigned to it.
The PIM functionality requires Azure AD Premium P2 licenses or Microsoft licenses that include the P2 license, such as EMS E5, EMS A5, or Microsoft 365 E5.
People whose Azure AD accounts are assigned privilege roles in PIM and are required to perform MFA to request the role should already have registered at least one MFA method.
Tip
Microsoft recommends configuring at least two MFA methods that are not tied to the same mobile number or mobile device.
How to do it...
Perform these steps to set up a person with the Conditional Access administrator privileged role in PIM that requires MFA and a justification to request it:
- Navigate your browser to https://portal.azure.com.
- Sign in with an account in Azure AD...
