TriPoint Labs, LLC

Azure PIM and Entra role management in your browser

Privly brings Microsoft Entra ID and Azure Privileged Identity Management (PIM) into your browser. Elevate roles, manage approvals, and track expirations without opening the Azure portal. WHAT YOU CAN DO • Activate and deactivate eligible Entra directory roles, PIM-enabled groups (member or owner), and Azure resource roles at any scope: management group, subscription, resource group, or individual resource • Approve or deny requests where you are the approver, and cancel your own pending requests • See active assignments with live countdown timers and progress bars • Get a notification before an activation expires (configurable lead time) and when it expires, each with its own sound • Filter and search roles, groups, and subscriptions across everything you hold WORKS THE WAY YOUR ORGANIZATION DOES • Respects your PIM policies: maximum duration, justification, ticket number, and approval requirements are enforced in the form before you submit • Handles step-up authentication in the flow, including MFA and Conditional Access authentication contexts • Sign in with multiple accounts across multiple tenants and switch between them instantly • Optionally reloads open Microsoft admin portals after activation so new permissions take effect immediately • Never modifies tenant configuration: no policy changes, no server-side agent, just the same Graph and ARM APIs the portal uses, called on your behalf PRIVATE BY DESIGN • All data stays on your device in browser storage. There is no Privly backend and no telemetry • Tokens come directly from Microsoft using the standard OAuth 2.0 authorization code flow with PKCE • The built-in diagnostic log is redacted before anything is written, and you can disable or clear it at any time WE NEED YOUR HELP Privly is built cloud-aware, but validating GCC High and DoD support requires a real sovereign tenant. If your organization runs in a sovereign cloud and wants Privly there, reach out through support.tripointlabs.com. We would love to partner with you. GETTING STARTED 1. Pin Privly and sign in with your work account 2. Review your eligible roles, groups, and Azure scopes 3. Activate with the duration and justification your policy requires Requires an admin-consented Entra app registration in your tenant. An admin consent link is available on the sign-in page.