PIM for Groups

in plain english

Apply PIM-style time-bound activation to membership in security groups (not just role assignments) — useful for app access, RBAC roles assigned to groups, and SaaS app group membership.

official microsoft definition

Extends Privileged Identity Management to enable just-in-time, approval-based, and time-bound activation of group membership for security groups, including those used for role assignments and app access.

plans & eligibility

• Requires Microsoft Entra ID P2 or Microsoft Entra ID Governance

related on aguidetocloud