Microsoft has made privileged access management (PAM) generally available for Office 365, but in reality it's only Exchange Online that supports the new feature. This isn't surprising because Exchange has a well-developed role-based access control system that the PAM developers can leverage, but it does pose a question about how they'll extend PAM to other Office 365 workloads.