Discover roles assigned by PIM Group
Inspect eligible and active role assignments for a PIM group, using CCM: Role - Microsoft Application Administrator as the worked example.
Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
SCENARIO: Discover what roles are activated by "CCM: Role - Microsoft Application Administrator"
- Go to Groups -> All Groups in Entra
- Search for
CCM: Role - Microsoft Application Administrator
- From the results click the group name
- Click Assigned roles
Screenshot retained for review
- Click the "Eligible assignments" and "Active assignments" to see what roles are in those categories. See Eligible and Active assignment screenshots below.
Note: To find out if this group is included as a member of another group, you will be able to find out by checking "Group Memberships".
At the time of writing, this group is not a member of any other groups.
Eligible assignments
Screenshot retained for review
Active assignments
Screenshot retained for review