Retrieving Azure AD Privileged Identity Management Role Assignments

PIM, or Privileged Identity Management, is a solution for managing the assignment of privileged Entra ID roles to users and groups. PIM role assignments can be active or eligible. If you report "normal" role assignments, you only see the currently active set. Some more processing is needed to fetch the PIM assignments. Here's our version of a script to do the job for holders of the Exchange administrator and Global administrator roles.