Merge pull request #50161 from rolyon/rolyon-pim-toc-mvc

[Azure AD] [PIM] Updates for MVC

Author: Ja-Dunn

articles/active-directory/privileged-identity-management/TOC.md

@@ -0,0 +1,93 @@
+- name: Privileged Identity Management documentation
+  items:
+- name: Overview
+  items:
+  - name: What is Azure AD PIM?
+    href: pim-configure.md
+- name: Concepts
+  items:
+  - name: Subscription requirements
+    href: subscription-requirements.md
+  - name: Directory roles you can manage
+    href: pim-roles.md
+  - name: Secure privileged access
+    href: ../users-groups-roles/directory-admin-roles-secure.md?toc=%2fazure%2factive-directory%2fprivileged-identity-management%2ftoc.json
+  - name: Overview dashboards
+    href: pim-resource-roles-overview-dashboards.md
+  - name: Email notifications
+    href: pim-email-notifications.md
+  - name: Assignment types
+    href: pim-resource-roles-eligible-visibility.md
+  - name: Security wizard
+    href: pim-security-wizard.md
+- name: How-to guides
+  expanded: true
+  items:
+  - name: Start using PIM
+    href: pim-getting-started.md
+  - name: Activate roles
+    items:
+    - name: Activate my directory roles
+      href: pim-how-to-activate-role.md
+    - name: Activate my resource roles
+      href: pim-resource-roles-activate-your-roles.md
+  - name: Configure PIM
+    items:
+    - name: Discover Azure resources
+      href: pim-resource-roles-discover-resources.md
+    - name: Grant access to others to manage PIM
+      href: pim-how-to-give-access-to-pim.md
+    - name: Enable subscription management
+      href: pim-resource-roles-enable-subscription-management.md
+  - name: Manage directory roles
+    items:
+    - name: Assign roles
+      href: pim-how-to-add-role-to-user.md
+    - name: Configure role settings
+      href: pim-how-to-change-default-settings.md
+    - name: Require MFA
+      href: pim-how-to-require-mfa.md
+    - name: Configure alerts
+      href: pim-how-to-configure-security-alerts.md
+    - name: Approve requests
+      href: azure-ad-pim-approval-workflow.md
+    - name: View audit history
+      href: pim-how-to-use-audit-log.md
+  - name: Manage resource roles
+    items:
+    - name: View who has access
+      href: azure-pim-resource-rbac.md
+    - name: Assign roles
+      href: pim-resource-roles-assign-roles.md
+    - name: Configure role settings
+      href: pim-resource-roles-configure-role-settings.md
+    - name: Require MFA
+      href: pim-resource-roles-require-mfa.md
+    - name: Configure alerts
+      href: pim-resource-roles-configure-alerts.md
+    - name: Approve requests
+      href: pim-resource-roles-approval-workflow.md
+    - name: Extend or renew roles
+      href: pim-resource-roles-renew-extend.md
+    - name: View audit history
+      href: pim-resource-roles-use-the-audit-log.md
+    - name: Use custom roles
+      href: pim-resource-roles-custom-role-policy.md
+  - name: Review access
+    items:
+    - name: Directory roles
+      items:
+      - name: Review my directory roles
+        href: pim-how-to-perform-security-review.md
+      - name: Start an access review
+        href: pim-how-to-start-security-review.md
+      - name: Complete an access review
+        href: pim-how-to-complete-review.md
+    - name: Resource roles
+      items:
+      - name: Review my resource roles
+        href: pim-resource-roles-perform-access-review.md
+      - name: Start an access review
+        href: pim-resource-roles-start-access-review.md
+      - name: Complete an access review
+        href: pim-resource-roles-complete-access-review.md

articles/active-directory/privileged-identity-management/TOC.yml

@@ -1,6 +1,6 @@
 ---
-title: Azure Privileged Identity Management Approval workflows | Microsoft Docs
-description: Learn about approval workflows in Privileged Identity Management (PIM)
+title: Approve or deny requests for Azure AD directory roles in PIM | Microsoft Docs
+description: Learn how to approve or deny requests for Azure AD directory roles in Azure AD Privileged Identity Management (PIM).
 services: active-directory
 documentationcenter: ''
 author: rolyon
@@ -18,122 +18,11 @@ ms.author: rolyon
 ms.custom: pim
 ---
 
-# Approvals
+# Approve or deny requests for Azure AD directory roles in PIM
 
-## Overview
+With Privileged Identity Management, you can configure roles to require approval for activation, and choose one or multiple users or groups as delegated approvers.
 
-With Approvals for Privileged Identity Management, you can configure roles to require approval for activation, and choose one or multiple users or groups as delegated approvers. Keep reading to learn how to configure roles and select approvers.
-
-
-## New Terminology
-
-*Eligible Role User* – An eligible role user is a user within your organization
-that’s been assigned to an Azure AD role as eligible (role requires activation).
-
-*Delegated Approver* – A delegated approver is one or multiple individuals or
-groups within your Azure AD responsible for approving requests to activate roles.
-
-## Scenarios
-
-The private preview supports the following scenarios:
-
-**As a Privileged Role Administrator (PRA) you can:**
-
--   [enable approval for specific roles](#enable-approval-for-specific-roles)
-
--   [specify approver users and/or groups to approve requests](#specify-approver-users-and/or-groups-to-approve-requests)
-
--   [view request and approval history for all privileged roles](#view-request-and-approval-history-for-all-privileged-roles)
-
-**As a designated approver, you can:**
-
--   [view pending approvals (requests)](#view-pending-approvals-requests)
-
--   [approve or reject requests for role elevation (single and/or bulk)](#approve-or-reject-requests-for-role-elevation-single-and/or-bulk)
-
--   [provide justification for my approval/rejection](#provide-justification-for-my-approval/rejection) 
-
-**As an Eligible Role User you can:**
-
--   [request activation of a role that requires approval](#request-activation-of-a-role-that-requires-approval)
-
--   [view the status of your request to activate](#view-the-status-of-your-request-to-activate)
-
--   [complete your task in Azure AD if activation was approved](#complete-your-task-in-azure-ad-if-activation-was-approved)
-
-### Navigation
-
-We've updated the navigation to support approvals
-
-![](media/azure-ad-pim-approval-workflow/image001.png)
-
-The default landing page provides convenient access to information about PIM and the new approvals documentation.
-
-![](media/azure-ad-pim-approval-workflow/image002.png)
-
-We’ve also added a new section for all users of PIM, ‘My Audit History’. Here you can find all the information relevant to your identity. This includes all your pending and completed requests, any decisions you’ve made about the requests you resolve, and all your past role activations in one convenient location.
-
-![](media/azure-ad-pim-approval-workflow/image003.png)
-
-### Enable approval for specific roles
-
-To enable approval for a specific role, first select Directory Roles from the left navigation.
-
-![](media/azure-ad-pim-approval-workflow/image004.png)
-
-Find and select settings in the Directory Roles left navigation
-
-![](media/azure-ad-pim-approval-workflow/image006.png)
-
-Select privileged Roles:
-
-![](media/azure-ad-pim-approval-workflow/image009.png)
-
-Select “Enable” in the Require approval section:
-
-![](media/azure-ad-pim-approval-workflow/image011.png)
-
-Once enabled, the blade will expand to show the following details:
-
-![](media/azure-ad-pim-approval-workflow/image013.png)
-
->[!NOTE]
-If you DO NOT specify any approvers, the PRA(s) become the default
-approver(s). PRA(s) would be required to approve ALL activation requests for
-this role.
-
-### Specify approver users and/or groups to approve requests
-
-To delegate approval, click the option to “Select approvers”:
-
-![](media/azure-ad-pim-approval-workflow/image015.png)
-
-When the Select approvers blade loads, you may search for a specific user or
-group using the search bar at the top, or selecting from the pre-populated list,
-then click “Select” when finished:
-
-![](media/azure-ad-pim-approval-workflow/image017.png)
-
-Note: You may select multiple users or groups at a time.
-
-Your selection will appear in the list of selected approvers as seen below:
-
-![](media/azure-ad-pim-approval-workflow/image019.png)
-
-To remove an approver, simply click the Remove button next to their name.
-
-To add additional approvers, repeat the process.
-
-## View request and approval history for all privileged roles
-
-To view request and approval history for all privileged roles, select Audit History from the dashboard:
-
-![](media/azure-ad-pim-approval-workflow/image021.png)
-
->[!NOTE]
-You can sort the data by Action, and look for “Activation Approved”
-
-### View pending approvals (requests)
+## View pending approvals (requests)
 
 As a delegated approver, you’ll receive email notifications when a request is
 pending your approval. To view these requests in the PIM portal, from the
@@ -146,14 +35,14 @@ From there, you’ll see a list of requests pending approval:
 
 ![](media/azure-ad-pim-approval-workflow/image024.png)
 
-### Approve or reject requests for role elevation (single and/or bulk)
+## Approve or deny requests for role elevation (single and/or bulk)
 
 Select the requests you wish to approve or deny, and click the button in the
 action bar that corresponds with your decision:
 
 ![](media/azure-ad-pim-approval-workflow/image025.png)
 
-### Provide justification for my approval/rejection
+## Provide justification for my approval/denial
 
 This will open a new blade to approve or deny multiple requests at once. Enter a
 justification for your decision, and click approve (or deny) at the bottom or
@@ -166,45 +55,7 @@ decision you made (in this example, the decision is approve):
 
 ![](media/azure-ad-pim-approval-workflow/image031.png)
 
-### Request activation of a role that requires approval
-
-Requesting activation of a role that requires approval may be initiated from
-either the old PIM navigation, or the new navigation, as the process for role
-activation remains the same. Simply select a role from the list of roles to
-activate:
-
-![](media/azure-ad-pim-approval-workflow/image033.png)
-
-If a privileged role requires Multi-Factor Authentication, you’ll be prompted to
-complete that task first:
-
-![](media/azure-ad-pim-approval-workflow/image035.png)
-
-Once complete, click Activate and provide a justification (if required):
-
-![](media/azure-ad-pim-approval-workflow/image037.png)
-
-The requestor will see a notification that the request is pending approval:
-
-![](media/azure-ad-pim-approval-workflow/image039.png)
-
-### View the status of your request to activate
-
-Viewing the status of a pending request to activate must be accessed from the
-new navigation. From the left navigation bar, select the “My Requests” tab:
-
-![](media/azure-ad-pim-approval-workflow/image041.png)
-
-The request state defaults to “Pending”, but you can toggle to see all or denied
-requests.
-
-### Complete your task in Azure AD if activation was approved
-
-Once the request is approved, the role is active and you may proceed with any
-work that requires this role.
-
-![](media/azure-ad-pim-approval-workflow/image043.png)
-
 ## Next steps
 
-Your feedback is valuable to us. Please feel free to share comments or feedback with us here!
+- [Approve or deny requests for Azure resource roles in PIM](pim-resource-roles-approval-workflow.md)
+- [Email notifications in PIM](pim-email-notifications.md)