EasyPIM

Author(s)

• Loïc MICHEL

Tags

Azure PIM EntraID PrivilegedIdentityManagement

Functions

Import-PIMAzureResourcePolicy Get-PIMAzureResourcePolicy Set-PIMAzureResourcePolicy Copy-PIMAzureResourcePolicy Export-PIMAzureResourcePolicy Backup-PIMAzureResourcePolicy Get-PIMAzureResourceActiveAssignment Get-PIMAzureResourceEligibleAssignment New-PIMAzureResourceActiveAssignment New-PIMAzureResourceEligibleAssignment Remove-PIMAzureResourceEligibleAssignment Remove-PIMAzureResourceActiveAssignment Get-PIMEntraRolePolicy Export-PIMEntraRolePolicy Import-PIMEntraRolePolicy Set-PIMEntraRolePolicy Backup-PIMEntraRolePolicy Copy-PIMEntraRolePolicy Get-PIMEntraRoleActiveAssignment Get-PIMEntraRoleEligibleAssignment New-PIMEntraRoleActiveAssignment New-PIMEntraRoleEligibleAssignment Remove-PIMEntraRoleActiveAssignment Remove-PIMEntraRoleEligibleAssignment Get-PIMGroupPolicy Set-PIMGroupPolicy Get-PIMGroupActiveAssignment Get-PIMGroupEligibleAssignment New-PIMGroupActiveAssignment New-PIMGroupEligibleAssignment Remove-PIMGroupActiveAssignment Remove-PIMGroupEligibleAssignment Show-PIMReport Get-PIMAzureResourcePendingApproval Approve-PIMAzureResourcePendingApproval Deny-PIMAzureResourcePendingApproval Get-PIMEntraRolePendingApproval Approve-PIMEntraRolePendingApproval Deny-PIMEntraRolePendingApproval Get-PIMGroupPendingApproval Approve-PIMGroupPendingApproval Deny-PIMGroupPendingApproval Copy-PIMAzureResourceEligibleAssignment Copy-PIMEntraRoleEligibleAssignment Invoke-EasyPIMOrchestrator Get-EasyPIMConfiguration Test-PIMPolicyDrift Test-PIMEndpointDiscovery

Dependencies

• • Az.Accounts
  • Microsoft.Graph.Authentication
  • Microsoft.Graph.Identity.Governance

Release Notes

   v1.10.0 Release Notes (2025-08-23):

   Multi-cloud Azure environment support (Chase Dafnis)
   - Enhanced Get-PIMAzureEnvironmentEndpoint for multi-cloud environments (Commercial, US Government, China, Germany)
   - Added comprehensive endpoint discovery and validation for all Azure cloud environments
   - Improved custom dependency management with Test-EasyPIMDependencies function.

   v1.9.4 Release Notes (2025-08-22):

   Group policy PATCH stability
   - Filter out null rule entries before PATCH to avoid Graph schema errors (rules: [ null ]).
   - Re-filter during per-rule isolation; isolation triggers only after a global PATCH failure.
   - Policy summary now increments Failed on apply errors (no false "Applied" on error paths).

   Diagnostics
   - Clearer isolation output (rule index, id, and type), retains body preview on failures.

   Notes: This is a patch-only release. No public API changes.

   v1.9.3 Release Notes (2025-08-21):

   Entra policy stability and correctness
   - Fixed unifiedRoleManagementPolicyApprovalRule payloads to use Graph subject sets (@odata.type + userId/groupId).
   - Normalized eligibility durations: convert PnY to day-based (PnD) and only include maximumDuration when expirationRequired=true.
   - Improved InvalidPolicy diagnostics with per-rule isolation and PATCH body previews.

   Authentication Context harmonization
   - When Authentication Context is enabled for a role, MFA is always stripped from EndUser enablement to avoid MfaAndAcrsConflict.
   - Still emit enablement rule to clear any prior MFA settings.

   Notifications
   - Flattened template properties and fixed boolean handling (.ToString().ToLower()) to prevent crashes.

   Contributors: Loïc MICHEL (original author), Chase Dafnis (multi-cloud / Azure environment support)
   Docs: https://github.com/kayasax/EasyPIM/wiki