PIM Manager

PIM Manager is a browser toolbar popup for activating Azure Entra ID PIM roles. It also handles Azure Resource roles and PIM for Groups memberships. You activate, extend, and deactivate roles without leaving your tab. What it does • Activate, extend, and deactivate Entra ID directory roles, Azure Resource roles, and PIM for Groups memberships (member or owner). • Bulk activate multiple eligible roles at once. If any fail, the toast tells you which. • Quick-activate favorites with one click at your default duration. • Expiry notifications with the warning time you set, in English or French. • Activation history of every action you've taken, including failures and the reason they failed. • Auto-refresh of active roles on an interval you set. • Light, dark, and system themes. Security • OAuth 2.0 authorization code + PKCE flow (RFC 7636) with state and nonce validation. • Bearer tokens are kept in chrome.storage.session, so they're memory-only and cleared when the browser closes. • Refresh-token grant against the v2 token endpoint with offline_access. • The extension only talks to login.microsoftonline.com and graph.microsoft.com. No external servers. No telemetry. Who it's for • IT admins managing Microsoft 365 and Azure tenants. • Security engineers operating under just-in-time access policies. • DevOps engineers who need temporary elevated privileges on subscriptions or resource groups. • Anyone tired of clicking through the Azure portal to activate one role. Privacy Preferences, history, and tokens stay on your device. There's no telemetry and no backend. The privacy policy lists every Microsoft Graph scope the extension requests and what each one is used for. Requirements • Chrome 99 or later. Chromium-based browsers (Edge, Brave, Arc, Vivaldi) work too. • An Azure Entra ID account with PIM-eligible roles or group memberships. • Your tenant admin may need to grant consent for the requested Graph scopes the first time you sign in. Support Bug reports and feature requests: laythch3bbi@gmail.com. PIM Manager is an independent project, not affiliated with Microsoft.