FAQ
Does TeamsPIM replace Microsoft Entra PIM?
Section titled “Does TeamsPIM replace Microsoft Entra PIM?”No. TeamsPIM brings PIM into Microsoft Teams; PIM still does the work. Eligible assignments, role settings, approvals and audit history all stay in Microsoft Entra PIM. TeamsPIM lets people request and approve access in Teams instead of the portal. See What is TeamsPIM.
Does TeamsPIM store my role data?
Section titled “Does TeamsPIM store my role data?”It does not keep a copy of your roles or assignments. Roles, assignments and approvals stay in your Microsoft Entra ID and Azure, and TeamsPIM reads and acts on them there. TeamsPIM does store subscription and licence records, short-lived request state, and an audit log of approval decisions in your tenant’s dedicated back end. See Data handling.
Which role types are supported?
Section titled “Which role types are supported?”- Microsoft Entra directory roles at directory scope. Roles scoped to an application or an administrative unit are not supported.
- PIM for Groups, as member or owner.
- Azure roles at subscription and resource-group scope. TeamsPIM must be assigned to the Azure subscription.
Do approvers need a TeamsPIM licence?
Section titled “Do approvers need a TeamsPIM licence?”Yes. Approvers receive approval cards only if they have a TeamsPIM licence. Assign them one like any other user.
Can I approve my own request?
Section titled “Can I approve my own request?”No. PIM does not allow anyone to approve their own request, and TeamsPIM follows PIM.
Where do I set who approves a role?
Section titled “Where do I set who approves a role?”In Microsoft Entra PIM role settings. TeamsPIM reads the approvers from there and has no approver settings of its own. See Approvers and role settings.
Does TeamsPIM send email?
Section titled “Does TeamsPIM send email?”Not for requests and approvals. Those notifications happen in Teams: approval cards in the bot chat and activity feed notifications, including a warning five minutes before an activation ends. See Notifications. Apart from emails to the purchaser about activating the subscription, TeamsPIM does not send email. Microsoft Entra PIM may still send its own emails, depending on your role settings.
Can users extend an activation?
Section titled “Can users extend an activation?”No. TeamsPIM does not extend or renew activations. When an activation ends, the user requests the role again.
Does it work on mobile?
Section titled “Does it work on mobile?”Yes. The Dashboard tab and the approval cards work in Teams on mobile. See Mobile.
Which languages does TeamsPIM support?
Section titled “Which languages does TeamsPIM support?”English only. TeamsPIM follows your Teams theme: light, dark or high contrast.
Can we use TeamsPIM across several Microsoft Entra tenants?
Section titled “Can we use TeamsPIM across several Microsoft Entra tenants?”Yes. Add up to 10 tenant IDs to a subscription, including its own, and each tenant grants admin consent. Licensed users then use Switch Directory. See Additional directories. TeamsPIM works with work or school accounts only, not personal Microsoft accounts.
What licence does Microsoft require?
Section titled “What licence does Microsoft require?”PIM needs Microsoft Entra ID P2 or Microsoft Entra ID Governance. Microsoft requires these licences for people with eligible or time-bound assignments and for people who approve requests. See Microsoft Entra ID Governance licensing fundamentals. Each TeamsPIM user also needs a TeamsPIM licence.
How long does setup take?
Section titled “How long does setup take?”After you submit your activation request, Xertone reviews it. Once it is approved, setting up your TeamsPIM environment takes a few minutes. You can follow progress on the Overview page of the Customer Admin Portal. See Review and provisioning.
Who needs to grant admin consent?
Section titled “Who needs to grant admin consent?”A Global Administrator of your tenant. If you are not one, copy the consent link and send it. See Admin consent.