Q37 RBAC Domain 4 · 20–25% of exam

A team follows just-in-time access principles. Which Azure AD (Entra ID) feature grants temporary elevated access for a specified duration?

  1. A Conditional Access
  2. B Azure RBAC role assignments (permanent)
  3. C Privileged Identity Management (PIM) eligible role assignments (correct answer)
  4. D Service principal rotation

Shortcut: PIM enables eligible role assignments where users must activate their role (with justification, MFA, approval) for a time-limited period. This implements just-in-time privileged access.