Microsoft Azure Security Technologies (AZ-500)

What should your first action be when securing Azure AD roles with Azure AD Privileged Identity Management (PIM)?

1. Sign up for Azure AD PIM

2. Consent to Azure AD PIM

3. Discover privileged roles

4. Discover resources

The correct answer is: Discover privileged roles

The most effective first action when securing Azure AD roles with Azure AD Privileged Identity Management (PIM) is to discover privileged roles. This initial step is crucial because it allows you to identify which roles currently exist within your Azure AD environment that have elevated privileges. Understanding the existing roles is essential to assess potential risks and security weaknesses, and it enables you to determine which roles need to be monitored and managed more closely. By discovering privileged roles, you can establish a baseline for your role management strategy and tailor your security policies accordingly. This includes implementing just-in-time access, setting up alerts for role assignments, and ensuring that only the necessary individuals have access to critical resources. While signing up for Azure AD PIM and consenting to it are necessary administrative steps, they do not directly contribute to the secure management of roles until you know the landscape of those roles. Discovering resources, while also important, generally comes after understanding the roles that control access to those resources, making it a secondary action in the context of securing Azure AD roles with PIM.