EasyPIM

Author(s)

• Loïc MICHEL

Tags

Azure PIM EntraID PrivilegedIdentityManagement

Functions

Import-PIMAzureResourcePolicy Get-PIMAzureResourcePolicy Set-PIMAzureResourcePolicy Copy-PIMAzureResourcePolicy Export-PIMAzureResourcePolicy Backup-PIMAzureResourcePolicy Get-PIMAzureResourceActiveAssignment Get-PIMAzureResourceEligibleAssignment New-PIMAzureResourceActiveAssignment New-PIMAzureResourceEligibleAssignment Remove-PIMAzureResourceEligibleAssignment Remove-PIMAzureResourceActiveAssignment Get-PIMEntraRolePolicy Export-PIMEntraRolePolicy Import-PIMEntraRolePolicy Set-PIMEntraRolePolicy Backup-PIMEntraRolePolicy Copy-PIMEntraRolePolicy Get-PIMEntraRoleActiveAssignment Get-PIMEntraRoleEligibleAssignment New-PIMEntraRoleActiveAssignment New-PIMEntraRoleEligibleAssignment Remove-PIMEntraRoleActiveAssignment Remove-PIMEntraRoleEligibleAssignment Get-PIMGroupPolicy Set-PIMGroupPolicy Get-PIMGroupActiveAssignment Get-PIMGroupEligibleAssignment New-PIMGroupActiveAssignment New-PIMGroupEligibleAssignment Remove-PIMGroupActiveAssignment Remove-PIMGroupEligibleAssignment Show-PIMReport Get-PIMAzureResourcePendingApproval Approve-PIMAzureResourcePendingApproval Deny-PIMAzureResourcePendingApproval Get-PIMEntraRolePendingApproval Approve-PIMEntraRolePendingApproval Deny-PIMEntraRolePendingApproval Get-PIMGroupPendingApproval Approve-PIMGroupPendingApproval Deny-PIMGroupPendingApproval Copy-PIMAzureResourceEligibleAssignment Copy-PIMEntraRoleEligibleAssignment Invoke-EasyPIMOrchestrator Get-EasyPIMConfiguration Test-PIMPolicyDrift

Dependencies

• • Az.Accounts
  • Az.KeyVault
  • Az.Resources

Release Notes

   v1.9.4 Release Notes (2025-08-22):

   ✅ Group policy PATCH stability
   - Filter out null rule entries before PATCH to avoid Graph schema errors (rules: [ null ]).
   - Re-filter during per‑rule isolation; isolation triggers only after a global PATCH failure.
   - Policy summary now increments Failed on apply errors (no false "Applied" on error paths).

   🔧 Diagnostics
   - Clearer isolation output (rule index, id, and type), retains body preview on failures.

   Notes: This is a patch-only release. No public API changes.

   v1.9.3 Release Notes (2025-08-21):

   ✅ Entra policy stability and correctness
   - Fixed unifiedRoleManagementPolicyApprovalRule payloads to use Graph subject sets (@odata.type + userId/groupId).
   - Normalized eligibility durations: convert PnY to day-based (PnD) and only include maximumDuration when expirationRequired=true.
   - Improved InvalidPolicy diagnostics with per-rule isolation and PATCH body previews.

   🔐 Authentication Context harmonization
   - When Authentication Context is enabled for a role, MFA is always stripped from EndUser enablement to avoid MfaAndAcrsConflict.
   - Still emit enablement rule to clear any prior MFA settings.

   🔔 Notifications
   - Flattened template properties and fixed boolean handling (.ToString().ToLower()) to prevent crashes.

   � Quality and tests
   - Resolved PSAvoidUsingEmptyCatchBlock and PSUseDeclaredVarsMoreThanAssignments findings.
   - Removed trailing whitespace flagged by tests. Pester now passes cleanly (9052/9052).

   Docs: https://github.com/kayasax/EasyPIM/wiki