This is a solution that helps organizations restrict privileged access within an existing Active Directory environment. THis is an instance of Privileged Identity Management (PIM) that is implemented using Microsoft Identity Manager (MIM).