Skip to content

Commit f61328f

Browse files
authored
Merge pull request #2739 from MicrosoftDocs/maccruz-privroles
New IIT column
2 parents 4bc8352 + 42d5216 commit f61328f

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

defender-xdr/advanced-hunting-identityinfo-table.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,10 +65,13 @@ For information on other tables in the advanced hunting schema, [see the advance
6565
| `ChangeSource` [*](#mdi-only) | `string` |Identifies which identity provider or process triggered the addition of the new row. For example, the `System-UserPersistence` value is used for any rows added by an automated process.|
6666
| `Tags` [*](#mdi-only) | `dynamic` | Tags assigned to the account user by Defender for Identity |
6767
| `AssignedRoles` [*](#mdi-only) | `dynamic` | For identities from Microsoft Entra-only, the roles assigned to the account user|
68+
| `PrivilegedEntraPimRoles` (Preview) [**](#mdi) | `dynamic` | A snapshot of privileged role assignment schedules and eligibility schedules for the account as maintained by Microsoft Entra Privileged Identity Management (excluding activated assignments) |
6869
| `TenantId` | `string` | Unique identifier representing your organization's instance of Microsoft Entra ID |
6970
| `SourceSystem` [*](#mdi-only) | `string` | The source system for the record|
7071

71-
<a name="mdi-only"></a>* Available only for tenants with Microsoft Defender for Identity, Microsoft Defender for Cloud Apps or Microsoft Defender for Endpoint P2 licensing.
72+
<a name="mdi-only"></a>* Available only for tenants with Microsoft Defender for Identity, Microsoft Defender for Cloud Apps or Microsoft Defender for Endpoint P2 licensing.<br>
73+
<a name="mdi"></a>** Available only for tenants with Microsoft Defender for Identity.
74+
7275

7376
## Related topics
7477

defender-xdr/whats-new.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,9 @@ For more information on what's new with other Microsoft Defender security produc
3232

3333
You can also get product updates and important notifications through the [message center](https://admin.microsoft.com/Adminportal/Home#/MessageCenter).
3434

35+
## February 2025
36+
- (Preview) The `PrivilegedEntraPimRoles` column is available for preview in the advanced hunting [IdentityInfo](advanced-hunting-identityinfo-table.md) table.
37+
3538
## January 2025
3639

3740
- (Preview) Device activity events from Microsoft Sentinel's device [entity pages](/azure/sentinel/entity-pages) are now visible in the *Timeline* tab on the [Device entity page](./entity-page-device.md#timeline-tab) in the Defender portal, in addition to remaining visible on the [*Sentinel events* tab](./entity-page-device.md#sentinel-events-tab).

0 commit comments

Comments
 (0)