What are the requirement for doing access reviews, audit and auditing on admin accounts via PIM in Azure AD? How I can do this?

Question

What are the requirement for doing access reviews, audit and auditing on admin accounts via PIM in Azure AD? How I can do this?

Answer 1

Hi

To create access reviews for Azure resources, you must be assigned to the Owner or the User Access Administrator role for the Azure resources. To create access reviews for Azure AD roles, you must be assigned to the Global Administrator or the Privileged Role Administrator role.

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-create-roles-and-resource-roles-review#prerequisites

Hope this helps,

Thanks

Michael Durkan

• If the reply was helpful please upvote and/or accept as answer as this helps others in the community with similar questions. Thanks!

Answer 2

Hi Vinod,

Just to add to Michael's answer, you should also understand the licensing requirements:

Features by license (for Entra)

https://learn.microsoft.com/en-us/azure/active-directory/governance/licensing-fundamentals

Search the tab in the link above for PIM requirements.