StationX
Start free

Browse › Microsoft 365 User Control

Can You Use Privileged Identity Management (PIM) to Enable Just in Time Role Requests?

Expert

Part of Microsoft 365 User Control Topic: General Cyber Security

Access

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, you will enable Privileged Identity Management (PIM) on certain roles in Azure Active Directory.

  1. Create two users, one a new full-time employee and another a temporary worker on contract
  2. Create groups for full time and contract workers and assign the users you created to their respective groups
  3. Create a role assignment for the full-time group to give its members permanent and unlimited access to the License Administrator role
  4. Create a second role assignment that gives an eligible but time-bound role directly to the contract worker that enables them to request temporary access to the License Administrator role

Note: Once you begin the lab, you will not be able to pause, save, or return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.