Activate Azure Resource-Based PIM Assignment in PIM

Overview

This article provides instructions on how to activate a resource-based PIM assignment.

Pre-requisites

Your account must have an eligible assignment to an Azure resource.

Process/Procedure

Note. In the following steps, I will activate my contributor assignment for the management group " Article Testing".

1. Log into the Azure portal.

2. Open the PIM (Privileged Identity Management) module.

• 2a. In the top center Azure search box, type PIM.
• 2b. Select "Azure AD Privileged Identity Management".

3. In the left vertical navigation menu, click on "My roles."

4. In the left vertical navigation menu, select “Azure Resources” to see all of your eligible group assignments.

5. In the right-hand pane, look for the resource/RBAC role for which you wish to activate, and click activate to the right.

6. Fill in the duration, ticket system, ticket number, and reason. If you wish to activate for a period of time in the future, check the box "Custom activation start time".

• 6a. IF YOUR PIM ASSIGNMENT REQUIRES SECONDARY APPROVAL... Please try to use a custom activation start time and give as much advanced notice as possible to the approvers.

7. If your request requires approval, an email will be sent to the approvers. Once approved, you will receive an email. If no approval is required, you will gain your access immediately or at the requested time.