Skip to content
Read-onlyDemo · synthetic dataYou are touring Permafrost with a synthetic tenant. Nothing here is a real customer, and no changes can be made.
Connect your tenantLeave demo
Permafrost EPM
Privilege posture · this customer's tenants

Privilege posture across your connected tenants.

0 tracked identities · 0 privileged · scored on Unified Principal Risk across all of this customer's connected tenants.

Open critical / high findings
0open
0 critical0 high
Avg UPR
0/100
Awaiting first sync to score
Avg Unused Permission %
0.0/100
Awaiting first sync to score
Privileged identities
0tracked
No identities tracked yet.
Risky privileged principals
0

Privileged principals with an active Entra ID Protection risk signal — investigate first.

Identity composition

No identities tracked yet — run a sync to populate this view.

Non-human identities

Service principals, managed identities, and Entra agent identities across all of this customer's connected tenants.

0non-human identities

0 service principals · 0 managed identities · 0 agent identities

—NHI:human

0 humans · industry avg 50:1–144:1

Upgrade for full inventory
Scope topology

Role assignments inherited down the management-group, subscription, and resource-group hierarchy. The highlighted path is the riskiest inherited grant across this customer's connected tenants.

Risky path — inherited assignments
PIM posture score

Just-in-time vs. permanent privilege across high-privilege identities.

—just-in-time coverage

Awaiting first sync to score

No privileged assignments observed yet.

Open PIM dashboard
Permission usage · 90d

Azure RBAC effective permissions vs what was exercised in the last 90 days. Entra directory roles surface in the Roles list, not here.

Additional steps required

Permafrost hasn't observed any role assignments yet across this customer's connected tenants. Run a sync from Settings to discover them.

Recent findings

Latest over-privilege detections · 0 open

View all

No identities tracked yet. Run a sync from Settings to begin discovery.

Denied escalation attempts · 7d

Failed allowlisted ARM operations attributed to tracked identities across all of this customer's connected tenants. Each denied attempt is a probe pattern — review the identity timeline for context.

0denied attempts

No denied escalation attempts in the last 7 days.

Service principal credential remediations

Open credential-revocation recommendations across all of this customer's connected tenants. Each row is a stale or rotated-out service-principal credential that should be removed from the directory.

0open recommendations

Upgrade to Trial+ to drill in.

Open incidents

Permission-posture pattern matches across this customer's priv-set in the last 30 days.

0pattern matches · 0 high, 0 medium
Upgrade for cross-identity view