EasyPIM simplifies Microsoft PIM management by abstracting complex Graph and ARM APIs into intuitive PowerShell cmdlets. Overcome portal limitations with bulk operations, export/import policies across tenants, manage Azure RBAC and Entra roles using friendly role names instead of GUIDs, track changes with interactive HTML reports, and automate what... More info

Function to help in the everyday to manage Microsoft Azure. This module supports PowerShell 7.2.2 For more information about the Az.Adm module, visit the following: https://github.com/Didjacome/Modules.Azure

pimcli is command line tool to activate Azure Active Directory Privileged Identity Management Eligible roles.

Export role assignments along with resource groups and resource group tags from Azure to YAML or JSON files.

PIM-as-Code orchestration for EasyPIM. Deploy role policies and assignments from JSON configuration files with WhatIf validation, delta mode for incremental changes, and drift detection. Automate PIM governance across Azure Resources, Entra Roles, and PIM Groups with reusable templates, CI/CD integration, and comprehensive audit trails. Turn config... More info

Retrieves AWS Credentials from a stored profile and uses these to obtain temporary credentials for the specified AWS account, using the specified IAM Role.

A report to show RBAC from Azure. This is a prototype.

This script provides a comprehensive analysis of Microsoft Intune's Role-Based Access Control (RBAC) configuration. It generates an interactive HTML report that includes role details, assignments, scope tags, permissions, and security analysis to help administrators audit and manage their Intune RBAC setup.

This script creates Owner, Contributor and Reader groups for each Azure Resource Group with a secure-rbac:enabled tag, and creates an RBAC role assignment for each group.

Tools for implementing a regular component-based RBAC structure in Active Directory

PowerShell module for managing Microsoft Entra ID Privileged Identity Management (PIM) role activations through a modern GUI interface. Supports authentication context, bulk operations, and policy compliance. Developed with AI assistance. Requires PowerShell 7+.

This script checks for the new devices registered in the last x hours and automatically creates objects in Intune for their management using Intune roles These are the objects created by this script: AdminRole-OB. Intune Role created for users OB, with specific permissions copied from a custom Role RoleAssigment-OB. Role assignment of the role... More info

Analyzes Microsoft Defender for Office 365 permissions, directory roles, access types, and authentication modes. Provides tailored recommendations for any missing permissions required to perform specific actions within the Defender portal.

Beta version of the PCIT Permission analyser module (not signed)

PowerShell module for managing Azure AD (Entra ID) and Group Privileged Identity Management (PIM) roles. Supports role activation, monitoring, and management with an enhanced user experience.

This module provides functions to manage Intune admin roles, role assignments, and scope tags using Microsoft Graph Beta.

Secure password manager using AES encryption and key-based protection.

Comprehensive security posture assessment and identity governance reporting framework for Microsoft 365 and Azure environments. Current Release (v1.0): Authentication Context Inventory - Complete discovery and analysis of authentication context usage across all Microsoft 365 services - Purview sensitivity labels with embedded authentication re... More info