Skip to content
InvardiaInvardia
Why InvardiaProductsFeaturesPricingCommunity
Docs
All documentation
Product documentationPIM ManagerSecurityInsight
SettingsPIM Manager settingsSecurityInsight settingsEntra Policy Suite settings
ScriptsPIM Manager scriptsSecurityInsight scriptsEntra Policy Suite scriptsInvardia scripts
Error codesPIM Manager error codesSecurityInsight error codes
API and MCPPIM Manager APIPIM Manager MCP toolsSecurityInsight APISecurityInsight MCP tools
SecurityPIM Manager security packSecurityInsight security packEntra Policy Suite security pack
Network and designPIM Manager network guidesPIM Manager command wizardNetwork egressDesign your installationCalculate your cost
SupportSetup scriptsRemote support access
Search the docs
SupportAboutContactBook a demoCustomer portalDesign your installationFree Pro trial

PIM Manager settings · Settings > Naming conventions

AdminAccountPattern (admin account name)

KeyNamingConventions.AdminAccountPattern
WhereSettings > Naming conventions (also Get Started > Naming)
TypeText
Default{AdminTypePrefix}{AdminWord}-{Initial}{Platform} (e.g. admin-abc-id)
FeatureNaming that matches your organization · Community, Pro Business, Pro Enterprise, Pro MSP

What it does

The user name of a normal (day-to-day) admin account. Names are rendered in lower case, and a domain is added from the admin account domain setting.

When set

When set: the Create admin wizard, CSV import and the hybrid worker (for AD rows without a user name) generate new names with it. The literal start of the pattern is also one of the prefixes the engine uses to find admin accounts in your tenant, and admin rows are checked against it (a warning, not a block).

When blank or default

It cannot be saved blank: this is one of the four required naming keys, and the save is refused. A blank value left in the store by an older version makes the engine use the shipped default for it, with a warning in every run, until you set your own.

Risk and how to reverse it

Existing accounts are not renamed; the engine uses the user name stored on each row. A new pattern adds a recognition prefix, so more accounts can appear in the unmanaged-admin report (reported only, never disabled). It cannot be cleared (the save is refused). Reversible: restore the old pattern.

Requires

SuperAdmin in PIM Manager. Free (Community). Uses AdminTypePrefixes, EnvironmentSuffixes, AdminWord and TenantCommonName.

Recommended

Decide it before the first admin is created and keep it stable; use {AdminWord} and {TenantCommonName} instead of literal text so the pattern can be copied to other tenants.

Related settings

  • Admin account domain AdminAccountUpnSuffix
  • Prefix by admin type NamingConventions.AdminTypePrefixes
  • Suffix by environment NamingConventions.EnvironmentSuffixes
  • Service names NamingConventions.ServiceNames
  • Admin word NamingConventions.AdminWord
  • Tenant common name NamingConventions.TenantCommonName
  • AdminAccountPatternHighPriv (high-privilege admin name) NamingConventions.AdminAccountPatternHighPriv
  • AdminAccountDisplayNameSuffix (admin display name) NamingConventions.AdminAccountDisplayNameSuffix
  • AdminAccountPatterns (how admin accounts are recognised) NamingConventions.AdminAccountPatterns
  • AdminTypeDefault NamingConventions.AdminTypeDefault
  • EnvironmentDefault NamingConventions.EnvironmentDefault
  • ResourceGroupPattern (permission group name) NamingConventions.ResourceGroupPattern

Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack

InvardiaInvardia

See the risk. Control the access.

Products

PIM ManagerSecurityInsightEntra Policy SuiteAll featuresPricingFree 60-day Pro trialBook a demoWhy Invardia

Docs

DocumentationSearch the docsPIM Manager settingsSecurityInsight settingsPIM network guidesCommand wizardNetwork egressPIM Manager design configuratorSecurityInsight design configuratorDesign your installationCalculate your cost

Company

AboutContactCustomer portalSupportHow support worksHow updates reach youSupport in numbersSetup scriptsRemote support accessContact: info@invardia.com

Legal

Terms of saleLicence termsData processingPrivacyCookiesCompany information
© 2026 Invardia – a brand of 2LINKIT, founded and owned by Morten Knudsen · Strandvejen 21A, 6000 Kolding, Denmark · VAT DK39208032 · Contact: info@invardia.com