PIM Manager settings · Settings > Features & edition

Demo mode on

Key	DemoMode
Where	Settings > Features & edition > Demo mode
Type	On / off
Default	Off
Confirmation	PIM Manager asks you to confirm before it is switched on.

What it does

For a live demo environment. While on, every signed-in member of the demo guest group becomes a demo viewer: they can open every page and stage changes in their own browser, but the server refuses every commit, approval, job run, revoke and settings change they try. Everyone else keeps their own role.

When enabled

Within about 15 seconds of saving, members of the demo guest group get read-only access to every page at Reader level -- even if they hold no PIM Manager role -- and any role they had above that is capped. If the group cannot be read from Entra ID, nobody is treated as a demo viewer until it can: every signed-in person keeps their own role (a visitor without one sees nothing), a warning is logged and Home shows it. Applies to the hosted PIM Manager only, never the local console.

When disabled

Off: demo mode is not consulted at all -- no group lookup, every role works as before.

Risk and how to reverse it

It widens who can see: demo group members read every page a Reader can (secrets stay masked). If the group later cannot be read, the visitors lose their access and the administrators keep theirs. Saving is refused if the group cannot be read or you are in it yourself. Reversible: switch it off. A config restore or Copy settings never changes it.

Requires

SuperAdmin role to change. PIM Manager must be able to read the demo guest group and its members in Entra ID (GroupMember.Read.All or Group.Read.All). Uses Demo guest group. Hosted PIM Manager only.