This chapter covers Privileged Identity Management. AZ-900 tests under 2.5.
Jump to a section
A simple way to picture Privileged Identity Management (PIM)
Instead of all admins having elevated permissions permanently, PIM grants elevated access only when needed, improving security.
PIM provides just-in-time elevated access: users request elevated roles only when needed, with time limits and approval workflows, reducing standing admin access risk.
Define eligible roles
Roles are marked as requiring elevation.
Request access
Users request elevated roles when needed.
Approve/deny
Requests are approved or denied.
Time-limited access
Access expires after the defined period.
An engineer requests temporary admin access for a specific maintenance task, approved for 2 hours, then automatically revoked.
Objective 2.5 expects understanding of just-in-time privileged access.
Provides just-in-time elevated access.
Reduces standing admin permissions.
Includes approval workflows and time limits.
It provides just-in-time elevated access to privileged roles, requiring approval and limiting access duration to reduce standing privilege risk.
You've just covered Privileged Identity Management (PIM) — now see how well it sticks with free AZ-900 practice questions. Full explanations included, no account needed.
Done with this chapter?