Skip to content

Commit 26ef934

Browse files
Merge pull request #216180 from amsliu/pim-update
api updates
2 parents 0da5e12 + d8c2af7 commit 26ef934

File tree

1 file changed

+11
-3
lines changed

1 file changed

+11
-3
lines changed

articles/active-directory/privileged-identity-management/pim-resource-roles-activate-your-roles.md

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,9 @@ ms.topic: how-to
1010
ms.tgt_pltfrm: na
1111
ms.workload: identity
1212
ms.subservice: pim
13-
ms.date: 09/12/2022
13+
ms.date: 10/27/2022
1414
ms.author: amsliu
15-
ms.reviewer: ilyal
15+
ms.reviewer: rianakarim
1616
ms.custom: pim
1717
ms.collection: M365-identity-device-management
1818
---
@@ -72,12 +72,20 @@ When you need to take on an Azure resource role, you can request activation by u
7272

7373
Privileged Identity Management supports Azure Resource Manager (ARM) API commands to manage Azure resource roles, as documented in the [PIM ARM API reference](/rest/api/authorization/roleeligibilityschedulerequests). For the permissions required to use the PIM API, see [Understand the Privileged Identity Management APIs](pim-apis.md).
7474

75+
To activate an eligible Azure role assignment and gain activated access, use the [Role Assignment Schedule Requests - Create REST API](/rest/api/authorization/role-assignment-schedule-requests/create?tabs=HTTP) to create a new request and specify the security principal, role definition, requestType = SelfActivate and scope. To call this API, you must have an eligible role assignment on the scope.
76+
77+
Use a GUID tool to generate a unique identifier that will be used for the role assignment identifier. The identifier has the format: 00000000-0000-0000-0000-000000000000.
78+
79+
Replace {roleAssignmentScheduleRequestName} in the below PUT request with the GUID identifier of the role assignment.
80+
81+
For more details on managing eligible roles for Azure resources, see this [PIM ARM API tutorial](/rest/api/authorization/privileged-role-assignment-rest-sample?source=docs#activate-an-eligible-role-assignment).
82+
7583
The following is a sample HTTP request to activate an eligible assignment for an Azure role.
7684

7785
### Request
7886

7987
````HTTP
80-
PUT https://management.azure.com/providers/Microsoft.Subscription/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleAssignmentScheduleRequests/fea7a502-9a96-4806-a26f-eee560e52045?api-version=2020-10-01
88+
PUT https://management.azure.com/providers/Microsoft.Subscription/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleAssignmentScheduleRequests/{roleAssignmentScheduleRequestName}?api-version=2020-10-01
8189
````
8290

8391
### Request body

0 commit comments

Comments
 (0)