Omnicit.PIM

Author(s)

• Omnicit (originally by Justin Grote @justinwgrote)

Tags

PIM Azure EntraID Identity Privileged Windows MacOS Linux

Functions

Connect-OPIM Disable-OPIMAzureRole Disable-OPIMDirectoryRole Disable-OPIMEntraIDGroup Disable-OPIMMyRole Disconnect-OPIM Enable-OPIMAzureRole Enable-OPIMDirectoryRole Enable-OPIMEntraIDGroup Enable-OPIMMyRole Get-OPIMAzureRole Get-OPIMConfiguration Get-OPIMDirectoryRole Get-OPIMEntraIDGroup Install-OPIMConfiguration Remove-OPIMConfiguration Set-OPIMConfiguration Wait-OPIMDirectoryRole

PSEditions

Core

Dependencies

• • Az.Resources (>= 9.0.3)
  • Microsoft.Graph.Authentication (>= 2.36.0)

Release Notes

## [0.6.0-preview0001] - 2026-10-07

The module's source files are now plain ASCII without a byte-order mark. A few progress and confirmation messages and some help text show `--` and `->` where they used to show a typographic dash or arrow; apart from those characters, the ASCII change alters nothing about how the module behaves. `Get-Help about_Omnicit.PIM` now lists every command by area, and new automated checks keep the unit tests away from any real tenant and keep identifiers and credentials out of the documentation.

`Connect-OPIM`, `Enable-OPIMMyRole` and `Disable-OPIMMyRole` take a new `-DeviceCode` switch for machines without a browser, such as a remote session or a cloud PC: the command shows a short code and the address to open, and you finish the sign-in on any device. With `-IncludeARM`, Azure signs in with a device code too. Once used, every later sign-in in the same PowerShell session uses a device code until `Disconnect-OPIM`. Without the switch, sign-in is unchanged.