Azure AD PIM Alert Email Recipients

Question

Hello Everyone,

i have small question i hope you might help me with,
i've just activated PIM on my azure AD tenant.

i havent configured anything yet however as soon as i enabled PIM i started receiving Alert emails to some generic mailbox.

one alert i often get is Roles are being assigned outside of PIM for example

i cannot seem to find where to change the recipient of these alert mails.

anyone know where to change that setting ?

thanks

Answer 1

@HITCH BARDAWIL

Security Alerts for PIM are of many types and some of the default one are only configurable.
"Roles are being activated too frequently" alert, "There are too many global administrators" alert and the "Administrators aren't using their privileged roles" alert have some level of configuration option. You can find the same detailed in this document.

However, the alert that you are mentioning - "Roles are being assigned outside of PIM" - this alert is sent out to all the Global Administrators of that tenant. This alert is not customizable.

You can also visit this document to check for other customizations available.

Here's an snapshot example of the email that you should be receiving.

Answer 2

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-email-notifications

Answer 3

alright thanks for the answer