Skip to content
InvardiaInvardia
Why InvardiaProductsFeaturesPricingCommunity
Docs
All documentation
Product documentationPIM ManagerSecurityInsight
SettingsPIM Manager settingsSecurityInsight settingsEntra Policy Suite settings
ScriptsPIM Manager scriptsSecurityInsight scriptsEntra Policy Suite scriptsInvardia scripts
Error codesPIM Manager error codesSecurityInsight error codes
API and MCPPIM Manager APIPIM Manager MCP toolsSecurityInsight APISecurityInsight MCP tools
SecurityPIM Manager security packSecurityInsight security packEntra Policy Suite security pack
Network and designPIM Manager network guidesPIM Manager command wizardNetwork egressDesign your installationCalculate your cost
SupportSetup scriptsRemote support access
Search the docs
SupportAboutContactBook a demoCustomer portalDesign your installationFree Pro trial

PIM Manager settings · Settings > Naming conventions

PimGroupPattern (PIM group name)

KeyNamingConventions.PimGroupPattern
WhereSettings > Naming conventions (also Get Started > Naming)
TypeText
DefaultPIM-{Role}-{Department}
FeatureAn engine that keeps your tenant matching your model · Community, Pro Business, Pro Enterprise, Pro MSP
ConfirmationPIM Manager asks you to confirm before it is switched on.

What it does

The name of a PIM group, built around its tag ({Role}). It is also how PIM Manager and the engine recognise your groups: the literal text before the first token (PIM- by default) is the prefix used to find managed groups.

When set

When set: new group names from the wizards and template packs use it. From the next engine run the literal prefix decides which groups the engine reads from the tenant, which groups may be retired, which groups the hybrid worker mirrors to AD (prefix + -S_AD), and how tags are read back from names.

When blank or default

It cannot be saved blank: this is one of the four required naming keys, and the save is refused. A blank value left in the store by an older version makes the engine use the shipped default for it, with a warning in every run.

Risk and how to reverse it

Existing groups are not renamed. Change the prefix and groups with the old prefix are only found where a definition names them exactly; retiring them is refused, and the AD mirror follows the new prefix instead. A pattern with no literal prefix makes prefix-based actions select nothing. Reversible: restore the old pattern; the next run recognises the old groups again.

Requires

SuperAdmin in PIM Manager. Free (Community). A separate group prefix setting, if set, overrides the prefix for retirement.

Recommended

Decide it before the first group is created and keep a literal prefix of at least three characters (e.g. PIM- or GRP-) so the engine can prove which groups it owns.

Related settings

  • Discovery sweep FeatureGates.discovery.sweep
  • Scheduled jobs FeatureGates.scheduler.jobs
  • Jobs FeatureFlags.jobs
  • Direct-group types -- Tag prefix NamingConventions.GroupTypePrefixes
  • Direct-group types -- Administrative unit NamingConventions.GroupTypeAdminUnits
  • Permission-group administrative units NamingConventions.PermissionGroupAdminUnits
  • PimGroupAuPattern (AU-scoped group name) NamingConventions.PimGroupAuPattern
  • PimGroupTagRegex (strict tag check) NamingConventions.PimGroupTagRegex
  • AdminUnitNamePattern (administrative unit name) NamingConventions.AdminUnitNamePattern
  • Send a mail about newly discovered resources to DiscoveryNotifyRecipients
  • Discovery: what happens with a newly discovered resource DiscoveryAutoCreate

Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack

InvardiaInvardia

See the risk. Control the access.

Products

PIM ManagerSecurityInsightEntra Policy SuiteAll featuresPricingFree 60-day Pro trialBook a demoWhy Invardia

Docs

DocumentationSearch the docsPIM Manager settingsSecurityInsight settingsPIM network guidesCommand wizardNetwork egressPIM Manager design configuratorSecurityInsight design configuratorDesign your installationCalculate your cost

Company

AboutContactCustomer portalSupportHow support worksHow updates reach youSupport in numbersSetup scriptsRemote support accessContact: info@invardia.com

Legal

Terms of saleLicence termsData processingPrivacyCookiesCompany information
© 2026 Invardia – a brand of 2LINKIT, founded and owned by Morten Knudsen · Strandvejen 21A, 6000 Kolding, Denmark · VAT DK39208032 · Contact: info@invardia.com