PIM Manager settings · Settings > Group naming values
Permission-group administrative units
| Key | NamingConventions.PermissionGroupAdminUnits |
|---|---|
| Where | Settings > Group naming values |
| Type | Map (one value per item) |
| Default | L0: PIM-L0, L1: PIM-L1, L2: PIM-L2 |
| Feature | An engine that keeps your tenant matching your model · Community, Pro Business, Pro Enterprise, Pro MSP |
What it does
The administrative unit a permission group (an Entra role, Azure role or workload role group) is placed in, by its privilege level L0, L1 or L2.
When set
When set: new permission groups from the permission wizard, coverage suggestions and discovery (Azure, Power BI, Power Platform) get the new administrative unit for their level.
When blank or default
When blank / at the default: PIM-L0, PIM-L1 and PIM-L2.
Risk and how to reverse it
Only new definitions are affected; existing permission groups keep their administrative unit. If the named administrative unit is not defined, the new group cannot be placed and the check before commit flags it. Reversible: restore the old value.
Requires
SuperAdmin in PIM Manager. Free (Community). The administrative unit must exist as a definition.
Recommended
Keep one administrative unit per level, so you can delegate who manages Tier 0 groups separately from the rest.
Related settings
- Discovery sweep FeatureGates.discovery.sweep
- Scheduled jobs FeatureGates.scheduler.jobs
- Jobs FeatureFlags.jobs
- Direct-group types -- Tag prefix NamingConventions.GroupTypePrefixes
- Direct-group types -- Administrative unit NamingConventions.GroupTypeAdminUnits
- PimGroupPattern (PIM group name) NamingConventions.PimGroupPattern
- PimGroupAuPattern (AU-scoped group name) NamingConventions.PimGroupAuPattern
- PimGroupTagRegex (strict tag check) NamingConventions.PimGroupTagRegex
- AdminUnitNamePattern (administrative unit name) NamingConventions.AdminUnitNamePattern
- Send a mail about newly discovered resources to DiscoveryNotifyRecipients
- Discovery: what happens with a newly discovered resource DiscoveryAutoCreate
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack