AzureAdPimPolicy
PIM activation/assignment policy for an Entra ID role.
Fields
| Field | Type | Description |
|---|---|---|
| activationMaxDurationMinutes | Int! | Maximum activation duration in minutes. |
| activeAssignmentExpirationDays | Int! | Active assignment expiration in days (0 if permanent). |
| allowPermanentActiveAssignment | Boolean! | Whether permanent active assignments are allowed. |
| allowPermanentEligibleAssignment | Boolean! | Whether permanent eligible assignments are allowed. |
| approvers | [String!]! | Approver display identifiers (user IDs or group IDs). |
| eligibleAssignmentExpirationDays | Int! | Eligible assignment expiration in days (0 if permanent). |
| requireApprovalToActivate | Boolean! | Whether approval is required to activate the role. |
| requireMfaOnActiveAssignment | Boolean! | Whether MFA is required on active assignment. |
Used By
Referenced by