PIM Manager settings · Settings > Features & edition

Active-exemptions register on Template Rollout (preview)

Key	GovernancePreview.conformancePreview
Where	Settings > Features & edition > Governance preview
Type	On / off
Default	Off
Feature	Ready-made permission packs · Community, Pro Business, Pro Enterprise, Pro MSP
Confirmation	PIM Manager asks you to confirm before it is switched on.

What it does

Turns on the action paths of the Template Rollout page: adding and revoking exemptions, approving a template version, and deploying a template's rows. When off, the page and its conformance view can be read, but PIM Manager refuses those actions. It applies at once, and the banner updates on the next reload. Promoting a template entry to a ring is not covered by this switch.

When enabled

A SuperAdmin can record exemptions (template entries this tenant deliberately does not follow), approve template versions, and deploy. Deploying writes the template's rows into your workload assignments as a normal commit, and the engine applies them on its next run.

When disabled

Adding or revoking exemptions, approving templates and deploying are refused, with 'preview -- disabled'. Exemptions already recorded stay in effect.

Risk and how to reverse it

Switching it on allows exemptions that waive template entries for this tenant, and deployments that let the engine create workload role assignments. Reversible: switch it off and new actions are refused. Rows already deployed and exemptions already recorded stay.

Requires

Free (Community) and Pro. SuperAdmin to change it and to use the actions. 'Workload connectors: Intune + Defender XDR' on for deployed rows to be applied.