Skip to content

Update concept-pim-for-groups.md #1608

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Update concept-pim-for-groups.md #1608

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a723726
Update concept-pim-for-groups.md
rodrigooliani Jun 9, 2025
a9f0c2c
Update concept-pim-for-groups.md
rodrigooliani Jun 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion docs/id-governance/privileged-identity-management/concept-pim-for-groups.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,9 @@ To learn more about Microsoft Entra built-in roles and their permissions, see [M

Microsoft Entra role-assignable group feature is not part of Microsoft Entra Privileged Identity Management (Microsoft Entra PIM). For more information on licensing, see [Microsoft Entra ID Governance licensing fundamentals](~/id-governance/licensing-fundamentals.md) .

>[!IMPORTANT]
>Guest accounts with "Guest users have the same access as members (most inclusive)" permissions that are owners of a PIM-enabled group will have the same access as regular owners. However, Limited and Restricted Guest Users will experience limited access when accessing the "Privileged Identity Management" activities in a group. They will not be able to see if the group is already enabled for PIM, and instead, they will see a prompt asking, "Enable PIM for this group?" Additionally, restricted guest accounts will not have visibility into activated roles for other users.


## Relationship between role-assignable groups and PIM for Groups

Expand Down Expand Up @@ -104,4 +107,4 @@ Provisioning configuration depends on the application. Generally, we recommend h
- [Bring groups into Privileged Identity Management](groups-discover-groups.md)
- [Assign eligibility for a group in Privileged Identity Management](groups-assign-member-owner.md)
- [Activate your group membership or ownership in Privileged Identity Management](groups-activate-roles.md)
- [Approve activation requests for group members and owners](groups-approval-workflow.md)
- [Approve activation requests for group members and owners](groups-approval-workflow.md)