Review PIM security alerts for useful identity recommendations and in-portal fixes.
If you are licensed for PIM, this is such a hidden gem.
I really wish the name of the blade wasn’t Alerts…
It’s also recommendations with fix-it buttons, like Defender for Cloud does, except this is for Identity 😎
Some easy but highly valuable wins here :)
Open ID Governance > Privileged Identity Management > Microsoft Entra roles > Alerts. You’ll find things like roles that don’t require MFA for activation, admins who aren’t using their privileged roles, and too many Global Administrators.
Original 80-second recording of the PIM Alerts workflow, including alert details, Fix confirmations, and rescanning. Historical April 2025 Entra admin center UI. The recording includes lab account names and demonstrates removal of role assignments, so review selections before using Fix.
Download the original recording.
Review the affected accounts and roles before using the mitigation actions. Preserve your emergency access accounts. Some buttons remove role assignments or change activation requirements. There are also higher-severity alerts, including roles assigned outside PIM, that deserve investigation.
Microsoft’s PIM security alert reference explains each alert and its available fixes.
Original post: 25 April 2025. Documentation checked 14 October 2026.