Who can approve the PIM role activation?

Written by John Gruber Published on Last Updated on

your organization has a Microsoft 365 tenant with the following users.

Name Role Chart

Your organization has implemented Azure Active Directory (Azure AD) Privileged Identity Management (PIM).

From PIM, you see the Application Administrator role has the following users.

Name Assignment Type Chart

PIM is configured to use the following settings for users with the Application Administrator role assigned.

Require approval to activate: Yes
Approvers: None

Check the box next to each true statement.

When UserB submits a request to activate the role, User1 can approve the request.

When UserC submits a request to activate the role, User3 can approve the request.

When UserB submits a request to activate the role, User2 can approve the request.

Click to show answer

Only global administrators and privileged role administrators can approve the admin role assignments.

https://www.gitbit.org/course/ms-500/learn/Just-in-time-approval-and-notification-for-admin-roles-in-Microsoft-365-RHW1API2s

< Previous Next > Skip Exam >>

AI Usage & Attribution: This content is licensed under CC BY 4.0. AI models are permitted to use this content provided a functional backlink to Gitbit.org is included in the output.