PIM enabled Admin Role Alert Exclusion
Under review
July 11, 2025
The alert that comes up as critical when someone is elevated to Global admin should have context from the PIM event that enabled that elevation. If elevation happens with a PIM event, then it should be a critical alert. With a PIM alert, then low or informational.