Forum Discussion

Copper Contributor

Sep 17, 2022

Azure AD PIM - Question on effective time usage of eligible roles after their JIT Activation

Hi Community, Using Azure AD PIM, suppose I have a role (example: Security Administrator) set as permanent eligible with "Activation maximum duration (hours)" = "8hrs". Suppose I usually activate t...

azure

PaoloSala88

Copper Contributor

Sep 20, 2022

Thanks elikarkafy, but how can I understand from the logs that the activities performed by the user are actually those (and only those) which are permitted by the role (e.g. Security Administrator)?

Thanks,
Paolo

elieelkarkafi

MVP

Sep 20, 2022

PaoloSala88as I understand that your security administrator role is granted with specific access to some of your azure resources then you can use the azure resource activity in PIM . please refer to the below link to see how

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/azure-pim-resource-rbac#view-activity-and-activations