Many companies are now using PIM (Privileged Identity Management) to control and increase security on Azure AD roles like Global Administrator. But this feature should also be used on Azure resources (Subscriptions, Management groups, Resource groups, and resources) to prevent unwanted access, misuse, and "accidents".

This session focus on the discovery and implementation. Scripts to ease the job will also be made available