You manage an Active Directory Domain Services $($AD DS$)$ infrastructure that is integrated with a Microsoft Entra tenant.

You plan to design a solution that isolates AD DS privileged accounts from non$-$privileged AD DS accounts.

Which service should you use?

Entitlement Management

Identity Protection

Privileged Access Management $($PAM$)$

Privileged Identity Management $($PIM$)$