Built for very large tenants
No bulk listing of hundreds of thousands of users or groups: users are looked up on demand and only managed groups are read.
Purpose
Tools that enumerate the whole directory slow to a crawl - or get throttled - in large tenants.
Design
The engine looks users up on demand and reads only PIM-managed groups, filtered on the server side. Routine runs read only the memberships your rows name, and confirm what the faster read did not return. Graph reads are batched, and when Graph asks the engine to slow down it waits and resends the throttled reads together. Database calls share one connection pool.
Business opportunities
Runs stay fast even in very large directories, and the engine stays a good citizen next to your other Graph tools.
Related features
PIM Activator: activate the access you need, together
A browser extension for Edge and Chrome: tick the groups and roles you need, give one justification and activate them together - three clicks for a typical activation.
Roll out the PIM Activator from one guided page
One page takes you through deploying the browser extension: the sign-in apps, the settings, the Intune remediation, Edge for Business and PCs and servers without Intune.
An engine that keeps your tenant matching your model
You describe the access you want; the engine creates the groups, owners, policies, assignments and access passes your data defines, and keeps them that way.
Get Started: the steps to a working environment
A guided list of the steps that make an environment work - each marked done or still open from your own data.