This is the Trace Id: 03870a8c887e9736937c1b6866e1475a
Skip to main content Why Microsoft Security AI-powered cybersecurity Cloud security Data security & governance Identity & network access Privacy & risk management Security for AI Unified SecOps Zero Trust Microsoft Defender Microsoft Entra Microsoft Intune Microsoft Priva Microsoft Purview Microsoft Sentinel Microsoft Security Copilot Microsoft Entra ID (Azure Active Directory) Microsoft Entra Agent ID Microsoft Entra External ID Microsoft Entra ID Governance Microsoft Entra ID Protection Microsoft Entra Internet Access Microsoft Entra Private Access Microsoft Entra Permissions Management Microsoft Entra Verified ID Microsoft Entra Workload ID Microsoft Entra Domain Services Azure Key Vault Microsoft Sentinel Microsoft Defender for Cloud Microsoft Defender XDR Microsoft Defender for Endpoint Microsoft Defender for Office 365 Microsoft Defender for Identity Microsoft Defender for Cloud Apps Microsoft Security Exposure Management Microsoft Defender Vulnerability Management Microsoft Defender Threat Intelligence Microsoft Defender Suite for Business Premium Microsoft Defender for Cloud Microsoft Defender Cloud Security Posture Mgmt Microsoft Defender External Attack Surface Management GitHub Advanced Security Microsoft Defender for Endpoint Microsoft Defender XDR Microsoft Defender for Business Microsoft Intune core capabilities Microsoft Defender for IoT Microsoft Defender Vulnerability Management Microsoft Intune Advanced Analytics Microsoft Intune Endpoint Privilege Management Microsoft Intune Enterprise Application Management Microsoft Intune Remote Help Microsoft Cloud PKI Microsoft Purview Communication Compliance Microsoft Purview Compliance Manager Microsoft Purview Data Lifecycle Management Microsoft Purview eDiscovery Microsoft Purview Audit Microsoft Priva Risk Management Microsoft Priva Subject Rights Requests Microsoft Purview Data Governance Microsoft Purview Suite for Business Premium Microsoft Purview data security capabilities Pricing Services Partners Cybersecurity awareness Customer stories Security 101 Product trials Industry recognition Microsoft Security Insider Microsoft Digital Defense Report Security Response Center Microsoft Security Blog Microsoft Security Events Microsoft Tech Community Documentation Technical Content Library Training & certifications Compliance Program for Microsoft Cloud Microsoft Trust Center Service Trust Portal Microsoft Secure Future Initiative Business Solutions Hub Contact Sales Start free trial Microsoft Security Azure Dynamics 365 Microsoft 365 Microsoft Teams Windows 365 Microsoft AI Azure Space Mixed reality Microsoft HoloLens Microsoft Viva Quantum computing Sustainability Education Automotive Financial services Government Healthcare Manufacturing Retail Find a partner Become a partner Partner Network Microsoft Marketplace Marketplace Rewards Software development companies Blog Microsoft Advertising Developer Center Documentation Events Licensing Microsoft Learn Microsoft Research View Sitemap

Azure Active Directory (Azure AD) is now Microsoft Entra ID.

Learn more

Discover, restrict, and monitor access rights

Ensure your admin accounts stay secure by limiting access to critical operations with privileged identity management (PIM) solutions.

Reimagine secure access with Microsoft Entra

Discover the latest identity and access innovations and how to strengthen your defenses with Microsoft Entra.

What is privileged identity management?

Privileged identity management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access to important resources in your organization.

Privileged identity management in Microsoft Entra ID

Microsoft Entra privileged identity management enables you to limit standing admin access to privileged roles, discover who has access, and review privileged access.

Intro to privileged identity management

Manage, control, and monitor access to important resources in your organization with Microsoft Entra ID privileged identity management.

Manage least-privilege access

Enforce the principle of least privilege by periodically reviewing, renewing, and extending access to resources.

Use just-in-time privileged access

Eliminate persistent access and enforce time-limited access for critical roles in privileged identity management.

Discover and monitor access

Ensure you know who has access to what and receive notifications when privileged roles are activated.

Take a deep dive into Microsoft Entra privileged identity management

Additional privileged identity management resources

Get started with privileged identity management

Learn about the prerequisites and prepare your privileged identity management deployment.

Deploy privileged identity management

Get step-by-step instructions on how to plan deployment of privileged identity management in your organization.

Configure privileged identity management

Find out about configuring privileged identity management with discovery and insights for Microsoft Entra ID roles.

Safeguard your organization with a seamless identity solution

Follow Microsoft Security