PimRoleTools

Author(s)

• Mike Guimaraes

Tags

PIM PrivilegedIdentityManagement Azure AzureAD EntraID Security RBAC Governance

Functions

Connect-PimGraph Get-PimRole Enable-PimRole Disable-PimRole Show-PimRole Get-PimGroupRole Enable-PimGroupRole Get-PimSummary

PSEditions

Core

Dependencies

• • Microsoft.Graph.Authentication (>= 2.0.0)
  • Microsoft.Graph.Groups (>= 2.0.0)
  • Microsoft.Graph.Identity.Governance (>= 2.0.0)
  • Microsoft.Graph.Identity.SignIns (>= 2.0.0)
  • Microsoft.Graph.Users (>= 2.0.0)

Release Notes

# Version 2.0.0
## Major Features
- Complete rewrite with enhanced functionality and user experience
- Added support for PIM group memberships
- New comprehensive summary view with Get-PimSummary
- Enhanced error handling and visual feedback

## New Functions
- Connect-PimGraph: Dedicated connection management with automatic scope handling
- Get-PimGroupRole: List PIM group assignments (member/owner)
- Enable-PimGroupRole: Activate PIM group membership
- Disable-PimRole: Deactivate active Azure AD roles
- Get-PimSummary: Comprehensive overview of all PIM assignments

## Improvements
- Color-coded output with emoji indicators for better readability
- Support for wildcards in role name searches
- Real-time remaining duration calculations with smart formatting
- Animated spinner during role activation with timeout handling
- Enhanced error messages with actionable guidance
- Support for ticket systems and audit information
- Streamlined API calls with better performance

## Focus
- Concentrated on Azure AD/Entra ID and Group PIM for reliable functionality
- Removed Azure Resource PIM due to API limitations (use Azure Portal instead)