Reporting Entra ID Administrative Role Assignments

A recent report highlighted the problem of on-premises accounts synchronized to Entra ID that receive administrative role assignments. This article explains how to report the administrative role assignments managed by Privileged Identity Management (PIM) or direct role membership so that it's easy to highlight on-premises accounts holding administrative roles.