AzurePIMStuff

0.0.3

PowerShell module for Azure Privileged Identity Management (PIM) automation. Some of them are explained at https://doitpshway.com/.

Some of the interesting functions:
- Get-PIMGroup: Returns Azure groups with some PIM eligible assignments.
- Get-PIMGroupEligibleAssignment: Returns eligible assignments for Azure AD groups.
- Get-PIMAccountEligibleMemberOf: Returns
PowerShell module for Azure Privileged Identity Management (PIM) automation. Some of them are explained at https://doitpshway.com/.

Some of the interesting functions:
- Get-PIMGroup: Returns Azure groups with some PIM eligible assignments.
- Get-PIMGroupEligibleAssignment: Returns eligible assignments for Azure AD groups.
- Get-PIMAccountEligibleMemberOf: Returns groups where selected account(s) is eligible (via PIM) as a member.
- Get-PIMDirectoryRoleAssignmentSetting: Gets PIM assignment settings for a given Azure AD directory role.
- Get-PIMDirectoryRoleEligibleAssignment: Returns Azure Directory role eligible assignments.
- Get-PIMManagementGroupEligibleAssignment: Returns all PIM eligible IAM assignments on selected (all) Azure Management group(s).
- Get-PIMResourceRoleAssignmentSetting: Gets PIM assignment settings for a given Azure resource role at a specific scope.
- Get-PIMSubscriptionEligibleAssignment: Returns eligible role assignments on selected subscription(s) and below (resources included).
- Invoke-PIMDirectoryRoleActivation: Activates PIM eligible directory role for current user (supports FIDO2 auth context).
- Invoke-PIMResourceRoleActivation: Activates PIM eligible resource role for current user (supports FIDO2 auth context).
- New-PIMResourceEligibleRoleAssignment - function for creating PIM eligible role assignment for specified Azure resource
- Set-PIMResourceRoleAssignmentSetting - function for setting PIM assignment settings for a given Azure resource role at a specific scope

Show more

Minimum PowerShell version

5.1

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name AzurePIMStuff

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name AzurePIMStuff

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2025 @AndrewZtrhgf. All rights reserved.

Package Details

Author(s)

  • @AndrewZtrhgf

Tags

Azure PIM AzurePIMStuff

Functions

Get-PIMAccountEligibleMemberOf Get-PIMDirectoryRoleAssignmentSetting Get-PIMDirectoryRoleEligibleAssignment Get-PIMGraphTokenWithClaim Get-PIMGroup Get-PIMGroupEligibleAssignment Get-PIMManagementGroupEligibleAssignment Get-PIMMyActiveDirectoryRole Get-PIMMyActiveResourceRole Get-PIMMyEligibleDirectoryRole Get-PIMMyEligibleResourceRole Get-PIMResourceRoleAssignmentSetting Get-PIMSubscriptionEligibleAssignment Get-PIMSupportedGroup Invoke-PIMDirectoryRoleActivation Invoke-PIMResourceRoleActivation New-PIMResourceEligibleRoleAssignment Set-PIMResourceRoleAssignmentSetting

PSEditions

Core Desktop

Dependencies

Release Notes


           0.0.3
               ADDED
                   Get-PIMGraphTokenWithClaim - function for getting Graph token with custom claims (for FIDO2 auth context scenarios)
                   Get-PIMMyActiveDirectoryRole
                   Get-PIMMyActiveResourceRole
                   Get-PIMMyEligibleResourceRole
                   Get-PIMSupportedGroup
                   Invoke-PIMDirectoryRoleActivation - function for activating PIM eligible directory role for current user (supports FIDO2 auth context)
                   Invoke-PIMResourceRoleActivation - function for activating PIM eligible resource role for current user (supports FIDO2 auth context)
                   New-PIMResourceEligibleRoleAssignment - function for creating PIM eligible role assignment for specified Azure resource
                   Set-PIMResourceRoleAssignmentSetting - function for setting PIM assignment settings for a given Azure resource role at a specific scope
               CHANGED
                   Various fixes
           0.0.2
               Added additional PIM functions for enhanced management.
           0.0.1
               Initial release with core PIM automation functions.
           

FileList

Version History

Version Downloads Last updated
0.0.3 (current version) 4 12/11/2025
0.0.2 30 7/24/2025
0.0.1 5 7/24/2025