PIMActivation
1.0.0
PowerShell module for managing Microsoft Entra ID Privileged Identity Management (PIM) role activations through a modern GUI interface. Supports authentication context, bulk operations, and policy compliance. Developed with AI assistance. Requires PowerShell 7+.
Minimum PowerShell version
7.0
Installation Options
Owners
Copyright
(c) 2025 Sebastian Flæng Markdanner. All rights reserved.
Package Details
Author(s)
- Sebastian Flæng Markdanner
Tags
PIM PrivilegedIdentityManagement EntraID AzureAD Identity Governance RBAC GUI Authentication ConditionalAccess Security Microsoft Graph
Functions
PSEditions
Dependencies
-
- Microsoft.Graph.Authentication (>= 2.0.0)
- Microsoft.Graph.Identity.DirectoryManagement (>= 2.0.0)
- Microsoft.Graph.Identity.Governance (>= 2.0.0)
- Microsoft.Graph.Users (>= 2.0.0)
- MSAL.PS (>= 4.37.0)
Release Notes
## Release Notes v1.0.0
### 🎉 Initial Release
- **Modern GUI Interface**: Clean Windows Forms application for PIM role management
- **Multi-Role Support**: Activate Microsoft Entra ID roles and PIM-enabled security groups
- **Authentication Context**: Seamless handling of Conditional Access authentication context policies
- **Bulk Operations**: Select and activate multiple roles simultaneously with policy validation
- **PowerShell Compatibility**: Requires PowerShell 7+ for optimal performance and modern language features
- **Policy Compliance**: Automatic detection of MFA, justification, and ticket requirements
- **Real-time Updates**: Live monitoring of active assignments and pending requests
### 🔧 Technical Features
- Hybrid PowerShell architecture for optimal MSAL.PS compatibility
- Direct REST API calls for authentication context preservation
- Automatic module dependency management
- Comprehensive error handling and user feedback
### 📋 Requirements
- Windows Operating System
- PowerShell 7+ (Download from https://aka.ms/powershell)
- Microsoft Graph PowerShell modules (auto-installed)
- Appropriate Entra ID permissions for PIM role management
- MSAL.PS module for authentication context management
### 📝 Development Note
This module was developed with the assistance of AI tools (GitHub Copilot and Claude), combining AI-accelerated development with human expertise in Microsoft identity and security workflows.
For detailed usage instructions, see the README.md file.
FileList
- PIMActivation.nuspec
- Private\Authentication\Disconnect-PIMServices.ps1
- Private\RoleManagement\Get-GroupRoles.ps1
- Private\RoleManagement\Get-PIMRoles.ps1
- Private\UI\Initialize-PIMForm.ps1
- Private\UI\Show-LoadingSplash.ps1
- Private\Utilities\Get-MembershipType.ps1
- Private\Utilities\Start-STAProcess.ps1
- PIMActivation.psd1
- Private\Profiles\Manage-PIMProfiles.ps1
- Private\RoleManagement\Get-PIMActiveRoles.ps1
- Private\RoleManagement\Initialize-AzureResourceSupport.ps1
- Private\UI\New-PIMActiveRolesPanel.ps1
- Private\UI\Show-OperationSplash.ps1
- Private\Utilities\Get-ScopeDisplayName.ps1
- Private\Utilities\Test-AuthenticationContextToken.ps1
- PIMActivation.psm1
- Private\RoleManagement\Clear-PIMPolicyCache.ps1
- Private\RoleManagement\Get-PIMEligibleRoles.ps1
- Private\RoleManagement\Invoke-PIMRoleActivation.ps1
- Private\UI\New-PIMDurationPanel.ps1
- Private\UI\Show-PIMActivationDialog.ps1
- Private\Utilities\Install-RequiredModules.ps1
- Private\Utilities\Test-STAMode.ps1
- Private\Authentication\Clear-AuthenticationCache.ps1
- Private\RoleManagement\Get-AzureResourceRoles.ps1
- Private\RoleManagement\Get-PIMPendingRequests.ps1
- Private\RoleManagement\Invoke-PIMRoleDeactivation.ps1
- Private\UI\New-PIMEligibleRolesPanel.ps1
- Private\UI\Update-PIMRolesList.ps1
- Private\Utilities\Show-TopMostMessageBox.ps1
- Public\Start-PIMActivation.ps1
- Private\Authentication\Connect-PIMServices.ps1
- Private\RoleManagement\Get-EntraIDRoles.ps1
- Private\RoleManagement\Get-PIMRolePolicy.ps1