How to Request Temporary Elevated Access in Azure Priviledged Identity Management (PIM)

The purpose of this article is to detail the process for elevating your permissions in Azure Cloud.

• Vanderbilt University Community with access to an Azure subscription.

  • Faculty and Staff

  • Undergraduate Students

  • Graduate and Professional Students

• VUIT Internal Knowledge  

• Ensure you have access to the Azure tenant.
• You must have read-only access to a VU-managed subscription.
• You must be added to an AD group eligible to escalate permissions (typically, ending with _Contributor).  

This guide will walk you through the process of requesting temporary "elevated" permissions for specific tasks.

1. Sign into the Azure portal using your Vanderbilt email and password
2. At the top of the page, use the search bar to navigate to Microsoft Entra Privileged Identity Management
3. Under Tasks, select My Roles, then select Azure Resources
   
4. Under Eligible assignments, there will be a list of subscriptions or resources that can be activated. Select Activate next to the subscription you wish to elevate permissions in.
   
5. In the pop-up, set your duration between 0.5 and 8 hours, and include your need for elevation within the Reason field.
6. Once entered, click the Activate button. Once you have been elevated, the browser will refresh.

https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-resource-roles-activate-your-roles