Detect privileged role assignments ignoring PIM activations (#9218)

[scorgatelli]

Required items, please complete

Change(s):

• Created new analytics rule that detects privileged role assignments while ignoring PIM activations

Reason for Change(s):

• The current rules are unable to detect eligible or active role assignments made within the context of PIM without also alerting on all PIM role activations. This results in a lot of noise.
• See discussion for Is there a way to tell PIM activation from user added permanently to role? #9218

Version Updated:

• N/A

Testing Completed:

• Yes

Checked that the validations are passing and have addressed any issues that are present:

• No

[scorgatelli]

@microsoft-github-policy-service agree company="Wilqo"