Activating "Just in Time" Microsoft Admin Roles via Privileged Identity Management (PIM)

Owned by Joshua Jones
Last updated: Dec 16, 2024
2 min read

Staff intended to have administrative roles in UConn’s Entra ID or Microsoft 365 environments are required to activate their role(s) using PIM. A PIM “Just in time” policy ensures that accounts only hold elevated privileges while they are necessary to perform administrative tasks.

Navigate to or bookmark https://entra.microsoft.com/#view/Microsoft_Azure_PIMCommon/ActivationMenuBlade/~/aadgroup to quickly access & elevate to your admin role via your PIM groups. Step by step instructions are below.

Roles can be activated for up to 8 hours at a time.

  1. Navigate to https://entra.microsoft.com and login with your NetIDAdmin account

  2. Expand the Identity Governance section and click on Privileged Identity Management (PIM)

    1. Optionally pin PIM as a favorite by clicking the star icon to the right of its entry.

      left-hand navigation in Microsoft Entra ID highlighting the Privileged Identity Management option in the Identity Governance section

  3. Click on My roles under the Tasks section on the left-hand side

    My roles option highlighted in the left-hand navigation of the Privilged Identity Management section of Microsoft Entra ID

  4. Then click Groups in the Active section

  5. Click Activate next to the role assigned group you wish to active roles for

    1. If you are responsible for managing a PIM group in your area, you will see an additional Owner role row under Eligible assignments. You can activate this owner role to manage other assignments in that group. Please review Managing "Just in Time" Microsoft Admin Roles via Privileged Identity Management (PIM) for more information on how to do so.

  6. Specify a duration and provide a short justification, then click Activate

  7. The roles associated with your PIM group will be added to your NetIDAdmin account for the duration you specified

Related Pages