Skip to content
InvardiaInvardia
Why InvardiaProductsFeaturesPricingCommunity
Docs
All documentation
Product documentationPIM ManagerSecurityInsight
SettingsPIM Manager settingsSecurityInsight settingsEntra Policy Suite settings
ScriptsPIM Manager scriptsSecurityInsight scriptsEntra Policy Suite scriptsInvardia scripts
Error codesPIM Manager error codesSecurityInsight error codes
API and MCPPIM Manager APIPIM Manager MCP toolsSecurityInsight APISecurityInsight MCP tools
SecurityPIM Manager security packSecurityInsight security packEntra Policy Suite security pack
Network and designPIM Manager network guidesPIM Manager command wizardNetwork egressDesign your installationCalculate your cost
SupportSetup scriptsRemote support access
Search the docs
SupportAboutContactBook a demoCustomer portalDesign your installationFree Pro trial

PIM Manager docs

1 Why

  • Why PIM Manager

2 Features

  • Features
  • Delegation model
  • Change control
  • Admin accounts
  • Visibility and evidence
  • Integrations
  • Platform and editions

3 How to design

  • How to design
  • Nested groups
  • Role-assignable groups
  • Tiers and levels
  • Naming
  • Migration
  • Workload roles

4 Security design

  • Security design
  • Identities
  • Engine permissions
  • Database
  • Sign-in
  • Approval and audit
  • Support access
  • Updates and license
  • Data
  • Database access (least privilege)

5 Architecture, setup and sizing

  • Architecture
  • Setup
  • Sizing

6 Operate

  • Operate
  • Guards
  • Access reviews
  • PIM Activator
  • Settings

7 Integrate

  • Integrate
  • REST API and ServiceNow
  • MCP server for AI assistants
  • Hybrid Active Directory
  • MSP: managing and managed tenants

8 Knowledge base

  • Knowledge base
  • How to onboard a consultant
  • How to onboard an admin
  • How to delegate a Power BI workspace
  • How to delegate an Azure landing zone or subscription
  • How to delegate Intune roles
  • How to delegate Defender XDR to a helpdesk
  • How to use Discovery and gaps
  • How to handle drift
  • How to undo a commit
  • How to enable access reviews
  • How to approve a held policy change
  • How to add a break-glass account
  • How to install the PIM Activator without Intune
  • How to set up PIM for Active Directory
  • How to read the access map and see who can activate a role
  • How to find the least-privileged role for a task
  • MSP: how to roll a change to one wave
  • How to activate with the PIM Activator
  • How to offboard an admin
  • FAQ
  • Lessons learned

9 Reference

  • Reference
  • Glossary

10 Support

  • Support

On this page

  • Pro support
  • Questions, trials and licenses
  • Community edition
  • What to include
  • When support needs to look inside

PIM Manager documentation · Verified against PIM Manager 3.0.23.3 on Nov 3, 2026

Support

How to get help with PIM Manager: Pro customers open a ticket with Invardia, and the Community edition is supported by the community on GitHub.

Pro support

Pro support comes from the people who build PIM Manager. Every ticket has a number and one owner at Invardia, gets a priority from P1 to P4, and is updated by mail and in the customer portal until it is solved. How support works describes the priorities, escalation and response targets.

Open a ticket in one of two ways:

  • Mail support@invardia.com. Each mail opens one ticket, so send one mail per issue.
  • Portal: sign in at portal.invardia.com and open Support.

In PIM Manager, Settings > Licence links to the support portal.

Questions, trials and licenses

For questions about PIM Manager, a trial or a license, mail info@invardia.com. How a trial starts is on the trial page.

Community edition

The Community edition is supported by the community. Report an issue or ask a question in GitHub issues. The repository carries the product’s original project name; it is the same product.

What to include

A ticket is solved fastest when it carries:

  1. The error code from Jobs > Engine logs & errors, for example pim-entra-0102. The Reference page explains each code.
  2. What you did, what you expected and what happened.
  3. A screenshot of the page, with personal data hidden.

Never send passwords, secrets, API keys or Temporary Access Passes in a ticket.

When support needs to look inside

Invardia has no access to your installation by default, and most cases are solved from the error code and your description. When a case needs Invardia to look inside your tenant, you can create the Invardia Support app for that case:

  1. You create it in your own tenant and choose its level. The steps are on Remote support access.
  2. You create its secret, decide how long it lives and upload it in the customer portal under Remote support. You also choose how it is renewed; by default it is not renewed without your approval.
  3. You give it access to this installation with Grant-PimSupportAccess.
  4. When the case is done, you take the access back with -Remove and remove the app with one command.

What each level grants, including the database rights every level carries, is in one table on Support access. The app owns itself so that a renewal can be carried out; Renewal and self-ownership explains what that allows and how you limit it.

Verified against PIM Manager 3.0.23.3 on Nov 3, 2026Download PDF

← Glossary

InvardiaInvardia

See the risk. Control the access.

Products

PIM ManagerSecurityInsightEntra Policy SuiteAll featuresPricingFree 60-day Pro trialBook a demoWhy Invardia

Docs

DocumentationSearch the docsPIM Manager settingsSecurityInsight settingsPIM network guidesCommand wizardNetwork egressPIM Manager design configuratorSecurityInsight design configuratorDesign your installationCalculate your cost

Company

AboutContactCustomer portalSupportHow support worksHow updates reach youSupport in numbersSetup scriptsRemote support accessContact: info@invardia.com

Legal

Terms of saleLicence termsData processingPrivacyCookiesCompany information
© 2026 Invardia – a brand of 2LINKIT, founded and owned by Morten Knudsen · Strandvejen 21A, 6000 Kolding, Denmark · VAT DK39208032 · Contact: info@invardia.com