Activate PIM

What Is PIM?

Privileged Identity Management (PIM) in Microsoft Entra ID provides just-in-time privileged access to Azure resources. Instead of permanent elevated permissions, users activate eligible roles only when needed and for a limited duration.

For the CCaaS team, PIM is used to temporarily enable admin-level access (for example, Contributor) to perform operational or deployment tasks in Azure while reducing long-term security risk.

Activate PIM Access

1. Access Azure Portal
   • Navigate to the Azure portal.
   • Sign in with your admin credentials.
2. Open Subscription
   • From the home page, go to Subscriptions. If it is not visible, use Search.
   • Select the Contact Centre as a Service subscription.
3. Go to Access Control
   • In the left navigation, select Access Control (IAM).
   • Open the Check Access tab.
4. Activate Your Role
   • Under Eligible time-bound assignments, locate your role (for example, Contributor).
   • Select Activate and provide a reason (for example, Testing).
   • Set the duration (up to 8 hours), then confirm activation.

Activation may take a few seconds. Refresh the page if your role does not appear as active right away.

Check PIM Expiry Time

1. In the Check Access tab, select Edit columns (above the assignments tabs).
2. Enable Start Time and End Time, then select Ok.
3. Review the Active time-bound assignments section.
4. If no assignment appears, there is no active PIM role.
5. If an assignment should be active but is missing, use Refresh next to Edit columns or refresh the page (F5).