# Privileged Identity Management (PIM)

> Chapter 101 of the Courseiva AZ-900 curriculum — https://courseiva.com/learn/az-900/azure-entra-pim

**Official objective:** 2.5 — Azure Architecture Services

## Introduction

This chapter covers Privileged Identity Management. AZ-900 tests under 2.5.

## Elevation on Demand

Instead of all admins having elevated permissions permanently, PIM grants elevated access only when needed, improving security.

## Core explanation

PIM provides just-in-time elevated access: users request elevated roles only when needed, with time limits and approval workflows, reducing standing admin access risk.

## Real-world context

An engineer requests temporary admin access for a specific maintenance task, approved for 2 hours, then automatically revoked.

## Exam focus

Objective 2.5 expects understanding of just-in-time privileged access.

## Step by step

1. **Define eligible roles** — Roles are marked as requiring elevation.
2. **Request access** — Users request elevated roles when needed.
3. **Approve/deny** — Requests are approved or denied.
4. **Time-limited access** — Access expires after the defined period.

## Key takeaways

- Provides just-in-time elevated access.
- Reduces standing admin permissions.
- Includes approval workflows and time limits.

## FAQ

**What is Privileged Identity Management (PIM)?**

It provides just-in-time elevated access to privileged roles, requiring approval and limiting access duration to reduce standing privilege risk.

---

Interactive version with quiz and diagrams: https://courseiva.com/learn/az-900/azure-entra-pim