PIM Role Configuration Changed

Last updated on:

About the rule

Rule Type

Standard

Rule Description

Identifies changes to Privileged Identity Management role settings.

Severity

Attention

Rule Requirement

Criteria

Action1: actionname = "DETECTION_ACTION_M365_PIM_ROLE_SETTINGS_CHANGED" select Action1.CALLER,Action1.TARGET,Action1.RESULT,Action1.TARGET_NAME,Action1.OPERATION

Detection

Execution Mode

realtime

Log Sources

Microsoft 365