Best Practices to implement Entra PIM

Question

Best Practices to implement Entra PIM

NeelDarji-7992 91

I am implementing Entra PIM. I want few points on best practices that are highly recommended to follow, for example, Break Glass, Emergency Accounts, etc..

Can anyone help me to prepare a list?

Shweta Mathur 30,451 Reputation points Microsoft Employee Moderator

2024-04-01T07:43:08.5+00:00

@Neel Darji

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

3 answers

Your answer

Shweta Mathur 30,451 Reputation points Microsoft Employee Moderator

2024-04-01T07:43:08.5+00:00

@Neel Darji

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Marcin Policht 77,895 MVP Volunteer Moderator

Refer to

https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-deployment-plan

and

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access

We recommend you keep zero permanently active assignments for roles other than the recommended two break-glass emergency access accounts, which should have the permanent Global Administrator role.

hth
Marcin