This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 22%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBJ%3C/text%3E%3C/svg%3E)
I was browsing in PIM, and I accidentally Enabled a role assignable group under "Privilege Access Groups" how do i remove it , with out changing any configurations of the group it self, or completely deleting the group? see the example dummy screenshot
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 28.000000000000004%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
This is the actual image of the group..( the 1st image was an dummy example) The role has not been activated , How can i remove the group from the PIM, and add it later when im ready to manage it ? and if i do nothing to it , what happens?
Thanks
Hello @Jeana Bedford ,
As it was being said, after assigning PIM to a group, it can't be removed.
Some of the use-cases there which came to my mind are when you activate the roles, you can not intentionally grant more privileges permissions to the members than that was intended. In addition to it, for privileged access groups that are used to elevate into Azure AD roles, we recommend that you require an approval process for eligible member assignments. Assignments that can be activated without approval might create a security risk from administrators who have a lower level of permissions. For example, the Helpdesk Administrator has permissions to reset an eligible user's password.
Please let me know if you still have any questions or concerns. I would love to provide clarity where I can.
Sincerely,
Olga O
Hello @Bedford, Jeana J ,
Welcome to the MS Q&A forum.
Yes, it seems you already found the answer. I am just confirming there. Once a privileged access group is managed, it can't be taken out of management. This prevents another resource administrator from removing Privileged Identity Management settings. The only way is to delete it.
Also, keep in mind if a privileged access group is deleted from Azure Active Directory, it may take up to 24 hours for the group to be removed from the Privileged access groups (Preview) blade.
--------------------------------------------------------
Let me know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.
Sinserely,
Olga