Unable to receive the weekly digest for PIM

Question

Right now we're using PIM with just-in-time access for the Global Admins. Before we received that PIM weekly digest every Sunday.

What I want to confirm is if we need to have a Global Admin active when the weekly digest is sent or if there's a way to receive those PIM emails even if we don't have a Global Admin active at the moment.

Answer 1

Hi @LeRoy, Kevin ,

Global admins, security admins, and security readers should automatically receive those mails if those users have a valid "Email" or "Alternate email" configured. You need to be an administrator to add other users. As an administrator, you can choose the users assigned to receive the email and configure the weekly digest email in the Microsoft Entra admin center > Protection > Identity Protection > Weekly digest. The users need appropriate permissions to view any linked reports. https://portal.azure.com/#blade/Microsoft_AAD_IAM/IdentityProtectionMenuBlade/WeeklyDigest

This is documented here: https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-notifications

If a user is enrolled in PIM to elevate to one of these roles on demand, then they will only receive emails if they are elevated at the time the email is sent.

You also need to have the right licenses enabled as documented here. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-getting-started

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us and improve searchability for others in the community who may be researching similar questions.