Let your ticketing system switch an admin account on for a set time
A REST API for systems such as ServiceNow: enable a disabled admin account or give a group membership for a period, read the status, cancel - or propose a change for an administrator to review.
Purpose
Where the request and its approval already live in a ticketing system, nobody should re-type them into another tool.
Design
The calling system signs in with its own Entra application, and only the applications you list are accepted; systems without Entra sign-in use an API key that is shown once, expires and can be revoked. For enabling an account or giving a membership for a period, the ticketing system's approval is the approval: PIM Manager checks the request again and applies it, then switches the access off when the period ends or the request is canceled. The same ticket sent twice does not open a second window. A system can also propose a change, which waits for an administrator instead of being applied. Only groups on the list you offer can be requested this way, and a request for a Tier 0, Tier 1 or untiered group always waits for a person to approve it.
Business opportunities
Privileged access follows your existing service-management process end to end, with the time limit enforced by PIM Manager.
Related features
PIM Activator: activate the access you need, together
A browser extension for Edge and Chrome: tick the groups and roles you need, give one justification and activate them together - three clicks for a typical activation.
Roll out the PIM Activator from one guided page
One page takes you through deploying the browser extension: the sign-in apps, the settings, the Intune remediation, Edge for Business and PCs and servers without Intune.
An engine that keeps your tenant matching your model
You describe the access you want; the engine creates the groups, owners, policies, assignments and access passes your data defines, and keeps them that way.
Get Started: the steps to a working environment
A guided list of the steps that make an environment work - each marked done or still open from your own data.