Direct Privileged Role Assignment (PIM Bypass) | Cortex XDR

chiki briki@ekkor13

•updated Aug 28, 2026•3•0•7

Detects role assignments made directly by a user, bypassing PIM workflow direct assignments are permanent, don't require approval, and don't expire