A good PIM design is the foundation. Running it every day at enterprise scale is the next challenge. Managing PIM in the portal means one blade per role and one scope at a time, while the business keeps adding new subscriptions, workspaces, apps and roles. Consultants come and go. And admins activate their roles one by one.

This session shares real-life lessons from automating privileged access in large enterprises with Microsoft Graph and APIs, one challenge at a time:
• Seeing the full picture: an access map that shows every path from a person to a role or scope, with delegations built by drag and drop instead of clicking through the portal.
• Keeping consultants under control: each consultant has an internal sponsor, their own company confirms on a schedule that they still work there, and the business carries out the access reviews.
• Keeping up with the business: new subscriptions, Power BI workspaces and newly released Entra, Defender and Intune roles are discovered automatically, and their delegation groups are prestaged before anyone asks.
• Making activation easy: the PIM Activator for Edge and Chrome activates several roles with one justification.
• Scaling across tenants: MSPs define delegations once and roll them out to customer tenants in waves, while each customer tenant applies the changes with its own identity.

Along the way, learn what it takes to automate your most privileged roles with confidence. Every change is reviewed, backed up and reversible, and a second admin approves sensitive changes. Everything runs in containers on managed identities, with no stored secrets.

All demos use the latest version of PIM Manager, a free community tool developed by the speaker.

How to automate privileged access with Microsoft Graph and APIs instead of clicking through the portal, with an access map that shows every path to privilege.

How to keep up with the business automatically: discovering new subscriptions, workspaces and roles, prestaging their delegations, and governing consultants with sponsors and access reviews.

How to automate your most privileged roles with confidence: reviewed and reversible changes, a second approver, and containers on managed identities with no stored secrets.