You're reading from Microsoft 365 Administrator MS-102 Exam Guide

Product type Book

Published in Dec 2023

Publisher Packt

ISBN-13 9781835083963

Pages 534 pages

Edition 1st Edition

Languages

Concepts

System Administration

Author (1):

Aaron Guilmette

Table of Contents (13) Chapters

Preface

1. Chapter 1: Implementing and Managing a Microsoft 365 Tenant

2. Chapter 2: Managing Users and Groups

3. Chapter 3: Managing Roles in Microsoft 365

4. Chapter 4: Implementing and Managing Identity Synchronization with Azure AD

5. Chapter 5: Implementing and Managing Authentication

6. Chapter 6: Implementing and Managing Secure Access

7. Chapter 7: Managing Security Reports and Alerts by Using the Microsoft 365 Defender Portal

8. Chapter 8: Implementing and Managing Email and Collaboration Protection by Using Microsoft Defender for Office 365

9. Chapter 9: Implementing and Managing Endpoint Protection by Using Microsoft Defender for Endpoint

10. Chapter 10: Implementing Microsoft Purview Information Protection and Data Lifecycle Management

11. Chapter 11: Implementing Microsoft Purview data loss prevention (DLP)

12. Other Books You May Enjoy

Planning and Implementing Privileged Identity Management

Privileged Identity Management (PIM) is the logical next step in RBAC and least-privilege identity management. While RBAC addresses what amount of privilege is needed to accomplish a task, PIM addresses the idea of how long this level of privilege is required.

Sometimes called Just-in-Time (JIT) access, PIM is a feature that allows users to request elevation to Azure AD roles or resources for limited periods of time to perform administrative tasks. At the end of the period, the roles and privileges are revoked, returning the user account to their pre-elevation access rights.

Note

PIM is an Azure AD Premium P2 or Enterprise Mobility + Security E5 feature.

PIM has a few key terms that you’ll need to understand:

Assignment: This describes how the user is granted the role. In the case of Eligible, it means a user has to perform an action to use the role, such as requesting elevation or asking for approval...