Share via

PIM is working without assign any license to the users

Mohamed Safwat 1 Reputation point
2021-12-09T10:26:08.357+00:00

I have an issue i already implement the PIM on my envirnoment and i assign eligible roles and give some users the ability to approve the requestes, what happed is that all the approvals and the users which have the eiligble roles can use there Features smoothly even if they didn't have any license they are unlicesene users, so how if comes ?

This articel is not true

Licenses you must have
Ensure that your directory has at least as many Azure AD Premium P2 licenses as you have employees that will be performing the following tasks:

Users assigned as eligible to Azure AD or Azure roles managed using PIM
Users who are assigned as eligible members or owners of privileged access groups
Users able to approve or reject activation requests in PIM
Users assigned to an access review
Users who perform access reviews

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alan Kinane 17,361 Reputation points MVP Volunteer Moderator
    2021-12-09T11:12:07.14+00:00

    This is more of a compliance issue than a technical limitation. Each user must have a license purchased and assigned for compliance reasons. If you do not have your users licenses correctly then you would be in breach of Microsoft licensing requirements.

    https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/subscription-requirements

    156263-capture.png

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Mohamed Safwat 1 Reputation point
    2021-12-09T12:25:25.67+00:00

    This is what happen i tried this 3 tasks without license and it works

    1. Users assigned as eligible to Azure AD or Azure roles managed using PIM
    2. Users who are assigned as eligible members or owners of privileged access groups
    3. Users able to approve or reject activation requests in PIM

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.