Answer Area
Correct Selection
A user that is assigned the Global Administrator role as active
will lose the role after 15 days
You can make the Global Administrator role available to activation requests
for up to three months
Microsoft Entra Privileged Identity Management (PIM) distinguishes between active role assignments, eligible role assignments, and temporary role activation.
First selection: will lose the role after 15 days.
The exhibit specifies:
Allow permanent active assignment: No
Expire active assignments after: 15 days
An active assignment grants Global Administrator permissions without requiring the user to activate the role.
Because permanent active assignments are disabled, PIM requires time-bound assignments. The maximum assignment duration is 15 days. Once an assignment expires, the user loses the assigned administrative privileges unless the assignment is renewed.
The eight-hour activation limit does not apply to directly assigned active roles.
Second selection: for up to three months.
The exhibit also specifies:
Allow permanent eligible assignment: No
Expire eligible assignments after: 3 months
An eligible assignment allows a user to request activation of the Global Administrator role during the eligibility period.
Therefore, the role can remain available for activation requests for up to three months.
Each individual activation can last a maximum of eight hours, as specified by the separate Activation maximum duration setting.
The 15-day limit applies to active assignments, not eligible assignments.
Microsoft References:
Submit