Privileged access management

When users have standing access to sensitive information or critical network configuration settings in Microsoft Exchange Online, compromised accounts or internal threat activities can occur. Microsoft Purview Privileged Access Management helps protect your organization from breaches and helps you meet compliance best practices by limiting standing access to sensitive data or access to critical configuration settings. Instead of administrators having constant access, just-in-time access rules are implemented for tasks that need elevated permissions. When you enable privileged access management for Exchange Online in Microsoft 365, your organization operates with zero standing privileges and provides a layer of defense against standing administrative access vulnerabilities.

Configure privileged access management

Use the following steps to configure privileged access management for your organization:

1. Learn about privileged access management
2. Create an approver's group
3. Enable privileged access management
4. Create an access policy
5. Submit/approve privileged access requests

More information about privileged access management

• Frequently asked questions about privileged access management