Exam MS-102 topic 1 question 271 discussion

Y N: Because user2 was assigned N: After 8 hours, User3 can activate again

Y N: Because user2 was assigned N: After 8 hours, User3 can activate again

https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure assigned State A user that has an active role assignment.

PIM has either Active or elegible. Assign is totally different and assign is assigned nothing more to do.

Y: N: Global Admin role is assigned and does not necessarily have to use MFA. importantly User is not affected by PIM N:

Agreed, Tony is correct YNN

https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings

Eligible assignments require the member of the role to perform an action to use the role. Actions might include activation, or requesting approval from designated approvers. Active assignments don't require the member to perform any action to use the role. Members assigned as active have the privileges assigned to the role.

https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure Term or concept Role assignment category Description eligible Type A role assignment that requires a user to perform one or more actions to use the role. If a user has been made eligible for a role, that means they can activate the role when they need to perform privileged tasks. There's no difference in the access given to someone with a permanent versus an eligible role assignment. The only difference is that some people don't need that access all the time. active Type A role assignment that doesn't require a user to perform any action to use the role. Users assigned as active have the privileges assigned to the role.

YNY YES, User1 must provide justification as per the PIM seeting. NO, User2 is already assigned. No need activation again. YES, User3 will no longer be able to activate after 8 hours as per the PIM setting.