You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/privileged-identity-management/pim-configure.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -86,28 +86,28 @@ To better understand Privileged Identity Management and its documentation, you s
86
86
87
87
## Role assignment workflow
88
88
89
-
The PIM role assignments give you a secure way to grant access to resources in your organization. This section describes the assignment workflow. The workflow includes assign roles to members, activate assignments, approve or deny request, extend and renew assignments.
89
+
The PIM role assignments give you a secure way to grant access to resources in your organization. This section describes the assignment workflow. The workflow includes assign roles to members, activate assignments, approve or deny requests, extend and renew assignments.
90
90
91
91
PIM keeps you informed by sending you and other participants [email notifications](pim-email-notifications.md). These emails might also include links to relevant tasks, such activating, approve or deny a request.
92
92
93
93
### Assign
94
94
95
-
To grant access to a resource, you assign roles to users, groups, service principals, or managed identities. When you assign a role, you select:
95
+
The assignment flow starts by assign roles. To grant access to a resource, you assign roles to users, groups, service principals, or managed identities. When you assign a role, you select:
96
96
97
97
- The members or owners you want to assign the role.
98
-
- The scope that limits the assigned role to a particular set of resources.
98
+
- The scope of the assignment. The scope limits the assigned role to a particular set of resources.
99
99
- The type of the assignment
100
100
-**Eligible** assignments require the member of the role to perform an action to use the role. Actions might include self-service activation, or requesting approval from designated approvers.
101
101
-**Active** assignments don't require the member to perform any action to use the role. Members assigned as active have the privileges assigned to the role.
102
-
-Time-bound access to resources using start and end dates, or permanent assignment. For eligible assignments, the members can activate or requesting approval during the start and end dates. For active assignments, the members can use the assign role during this period of time.
102
+
-The duration of the assignment, using start and end dates or permanent. For eligible assignments, the members can activate or requesting approval during the start and end dates. For active assignments, the members can use the assign role during this period of time.
103
103
104
104
For more information, check out the following articles: [Assign Azure AD roles](pim-how-to-add-role-to-user.md), [Assign Azure resource roles](pim-resource-roles-assign-roles.md), and [Assign eligibility for a privileged access group](groups-assign-member-owner.md)
105
105
106
106
### Activate
107
107
108
108
If users have been made eligible for a role, then they must activate the role assignment before using the role. To activate the role, users select specific activation duration within the maximum (configured by administrators), and the reason for the activation request.
109
109
110
-
If the role requires [approval](pim-resource-roles-approval-workflow.md) to activate, a notification will appear in the upper right corner of the user's browser informing them the request is pending approval. Otherwise, the member can start using the role immediately.
110
+
If the role requires [approval](pim-resource-roles-approval-workflow.md) to activate, a notification will appear in the upper right corner of the user's browser informing them the request is pending approval. If an approval isn't required, the member can start using the role immediately.
111
111
112
112
For more information, check out the following articles: [Activate Azure AD roles](pim-how-to-activate-role.md), [Activate my Azure resource roles](pim-resource-roles-activate-your-roles.md), and [Activate my privileged access group roles](groups-activate-roles.md)
0 commit comments