The Azure AD Privileged Identity Management (PIM) administration likewise permits Privileged Role Administrators to make permanent administrator role assignments. Also, Privileged Role Administrators can make clients eligible for Azure AD administrator roles. An eligible admin can activate the role when they need it, and after that their permissions expire once they're finished.

With Azure Active Directory (Azure AD), a Global administrator can make permanent Azure AD administrator job assignments. These role assignments can be made utilizing the Azure portal or utilizing PowerShell commands.