Skip to content
InvardiaInvardia
Why InvardiaProductsFeaturesPricingCommunity
Docs
All documentation
Product documentationPIM ManagerSecurityInsight
SettingsPIM Manager settingsSecurityInsight settingsEntra Policy Suite settings
ScriptsPIM Manager scriptsSecurityInsight scriptsEntra Policy Suite scriptsInvardia scripts
Error codesPIM Manager error codesSecurityInsight error codes
API and MCPPIM Manager APIPIM Manager MCP toolsSecurityInsight APISecurityInsight MCP tools
SecurityPIM Manager security packSecurityInsight security packEntra Policy Suite security pack
Network and designPIM Manager network guidesPIM Manager command wizardNetwork egressDesign your installationCalculate your cost
SupportSetup scriptsRemote support access
Search the docs
SupportAboutContactBook a demoCustomer portalDesign your installationFree Pro trial

PIM Manager settings · Settings > Group naming values

Direct-group types -- Tag prefix

KeyNamingConventions.GroupTypePrefixes
WhereSettings > Group naming values (the role prefix also in Get Started > Naming)
TypeMap (one value per item)
Defaultrole: ROLE-, organisation: ORG-, department: DEPT-, project: PROJ-, crossorg: CORG-
FeatureAn engine that keeps your tenant matching your model · Community, Pro Business, Pro Enterprise, Pro MSP

What it does

The start of the tag of each direct-group type (role, organisation, department, project, cross-org). It fills {GroupTypePrefix}; the rest of the tag is {ShortName}, e.g. ROLE-HelpDesk. The tag is then placed in the PIM group pattern to give the group name.

When set

When set: groups created from now on in the Create access wizard get the new tag prefix. PIM Manager also uses the prefixes to tell which type an existing tag belongs to (the access map groups role and organisation groups by prefix, and a cloned group keeps its type).

When blank or default

When blank / at the default: the shipped prefixes are used. A blank prefix cannot be saved -- tags of different types would collide.

Risk and how to reverse it

Existing groups keep their tag and name. After a change, groups with the old prefix are shown under OTHER in the access map and a clone of one is treated as a role group. Reversible: restore the old prefix.

Requires

SuperAdmin in PIM Manager. Free (Community). Nothing else.

Recommended

Keep the shipped prefixes unless you have an existing tagging scheme; decide before you create your first groups, because a group's name is fixed once it exists.

Related settings

  • Discovery sweep FeatureGates.discovery.sweep
  • Scheduled jobs FeatureGates.scheduler.jobs
  • Jobs FeatureFlags.jobs
  • Direct-group types -- Administrative unit NamingConventions.GroupTypeAdminUnits
  • Permission-group administrative units NamingConventions.PermissionGroupAdminUnits
  • PimGroupPattern (PIM group name) NamingConventions.PimGroupPattern
  • PimGroupAuPattern (AU-scoped group name) NamingConventions.PimGroupAuPattern
  • PimGroupTagRegex (strict tag check) NamingConventions.PimGroupTagRegex
  • AdminUnitNamePattern (administrative unit name) NamingConventions.AdminUnitNamePattern
  • Send a mail about newly discovered resources to DiscoveryNotifyRecipients
  • Discovery: what happens with a newly discovered resource DiscoveryAutoCreate

Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack

InvardiaInvardia

See the risk. Control the access.

Products

PIM ManagerSecurityInsightEntra Policy SuiteAll featuresPricingFree 60-day Pro trialBook a demoWhy Invardia

Docs

DocumentationSearch the docsPIM Manager settingsSecurityInsight settingsPIM network guidesCommand wizardNetwork egressPIM Manager design configuratorSecurityInsight design configuratorDesign your installationCalculate your cost

Company

AboutContactCustomer portalSupportHow support worksHow updates reach youSupport in numbersSetup scriptsRemote support accessContact: info@invardia.com

Legal

Terms of saleLicence termsData processingPrivacyCookiesCompany information
© 2026 Invardia – a brand of 2LINKIT, founded and owned by Morten Knudsen · Strandvejen 21A, 6000 Kolding, Denmark · VAT DK39208032 · Contact: info@invardia.com