The Attacking and Defending the Microsoft Cloud (Office 365 & Azure AD) presentation by Sean Metcalf and Mark Morowczynski got me thinking about Office 365 settings that admins should review. The idea behind PIM is that rights for administrative roles should be enabled only when you need them. To be able to use PIM, you need to have a license for Azure Active Directory (AD) Premium P2, Enterprise Mobility + Security (EMS) E5 or Microsoft 365 M5.”]