Question

What Azure AD role is required to activate Privileged Identity Management (PIM)?

1) Global administrator
2) Security administrator
3) Security operator
4) Security reader

Answer 1

To enable Azure AD Privileged Identity Management (PIM), a Global administrator role is required. This role allows for complete control over access management within an organization, including setting up just-in-time access and configuring approval workflows.

Step-by-step explanation:

To activate Privileged Identity Management (PIM) in Azure AD, the required role is Global administrator. PIM is a service in Azure that enables you to manage, control, and monitor access within your organization. This includes providing just-in-time privileged access to Azure AD and Azure resources, as well as requiring approval to activate privileged roles and applying conditional access policies. As a Global administrator, you have the highest level of privileges which include the ability to manage PIM and other Azure AD roles.