EasyPIM

Author(s)

• Loïc MICHEL

Tags

Azure PIM EntraID PrivilegedIdentityManagement

Functions

Import-PIMAzureResourcePolicy Get-PIMAzureResourcePolicy Set-PIMAzureResourcePolicy Copy-PIMAzureResourcePolicy Export-PIMAzureResourcePolicy Backup-PIMAzureResourcePolicy Get-PIMAzureResourceActiveAssignment Get-PIMAzureResourceEligibleAssignment New-PIMAzureResourceActiveAssignment New-PIMAzureResourceEligibleAssignment Remove-PIMAzureResourceEligibleAssignment Remove-PIMAzureResourceActiveAssignment Get-PIMEntraRolePolicy Export-PIMEntraRolePolicy Import-PIMEntraRolePolicy Set-PIMEntraRolePolicy Backup-PIMEntraRolePolicy Copy-PIMEntraRolePolicy Get-PIMEntraRoleActiveAssignment Get-PIMEntraRoleEligibleAssignment New-PIMEntraRoleActiveAssignment New-PIMEntraRoleEligibleAssignment Remove-PIMEntraRoleActiveAssignment Remove-PIMEntraRoleEligibleAssignment Get-PIMGroupPolicy Set-PIMGroupPolicy Get-PIMGroupActiveAssignment Get-PIMGroupEligibleAssignment New-PIMGroupActiveAssignment New-PIMGroupEligibleAssignment Remove-PIMGroupActiveAssignment Remove-PIMGroupEligibleAssignment Show-PIMReport Get-PIMAzureResourcePendingApproval Approve-PIMAzureResourcePendingApproval Deny-PIMAzureResourcePendingApproval Get-PIMEntraRolePendingApproval Approve-PIMEntraRolePendingApproval Deny-PIMEntraRolePendingApproval Get-PIMGroupPendingApproval Approve-PIMGroupPendingApproval Deny-PIMGroupPendingApproval Copy-PIMAzureResourceEligibleAssignment Copy-PIMEntraRoleEligibleAssignment Invoke-EasyPIMOrchestrator Get-EasyPIMConfiguration Test-PIMPolicyDrift

Dependencies

• • Az.Accounts
  • Az.KeyVault
  • Az.Resources

Release Notes

v1.9.0 Release Notes:

🚀 MAJOR FEATURE: Policy Orchestrator System
- New Invoke-EasyPIMOrchestrator cmdlet for comprehensive PIM management
- Unified configuration format supporting Azure Roles, Entra Roles, and Groups
- Policy templates and inheritance system for reusable configurations
- Corrected execution flow: policies → cleanup → assignments for compliance
- WhatIf support for validation before applying changes
- Environment variable integration ($env:TENANTID, $env:SUBSCRIPTIONID)

🔧 ENHANCEMENTS:
- Exported drift verification function Test-PIMPolicyDrift (previously internal) for direct module usage (object output + CI friendly FailOnDrift option via wrapper script)
- Robust error handling with graceful failure recovery
- CSV import compatibility between Azure and Entra role formats
- PowerShell 5.1 compatibility improvements
- Enhanced assignment processing with detailed progress reporting
- Comprehensive summary reporting with structured output
- Delta mode cleanup operations

🐛 FIXES:
- Fixed field naming differences (ActiveAssignmentRules vs ActiveAssignmentRequirement)
- Resolved PowerShell 7+ ternary operator compatibility issues
- Improved boolean value parsing in CSV operations
- Enhanced template value resolution in policy configurations

For detailed documentation and examples, visit: https://github.com/kayasax/EasyPIM/wiki