Closed lipalath-ms closed 1 year ago
Hi @ilantom ,
PIM eligible assignments cannot be assigned to service connection.
Additionally, AzSK was sunset around June 2021 and not actively maintained now but all PIM helper commands are working and you can still use those for PIM role activation.
There are some other modules released by PG team which you can explore further for PIM related operations:
AzureADPreview This module is still in preview but contains commands like Open-AzureADMSPrivilegedRoleAssignmentRequest which can help for PIM role activation. You can find more about this module here.
Az.Resources In the latest version 6.0.0, team has introduced few funtions like New-AzRoleAssignmentScheduleRequest which can help for PIM role activation. You can find more details about this module here.
Please let us know in case you have any further questions.
Thank you
Hi @ilantom ,
Please let us know if you need any additional information, closing this ticket for now. Thanks
The issue is regarding https://github.com/azsk/DevOpsKit-docs/blob/master/01-Subscription-Security/Readme.md#use-set-azskpimconfiguration-alias-setpim-for-configuringchanging-pim-settings-at-management-group-level
I'm running this PowerShell command:
On running this, I see the following error:
Is it not possible to assign PIM role to service connection?