Privilege identity management does not work for a user due to the message "switch to an account that has permissions"

Question

Privilege identity management does not work for a user due to the message "switch to an account that has permissions"

reza admin 140

Hello,

If I assign an admin role to a user as "Active" it works for the user, but if I change it from "Active" to "Eligible" it does not work due to the following message:
"Switch to an account that has permissions"

Any idea?

Thanks

0 comments

Answer accepted by question author

Anonymous

Hello reza admin,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
I got that you're running into issues with Privileged Identity Management (PIM) for a user who has been set to "Eligible." The error message "Switch to an account that has permissions" you are getting indicates that the user needs to activate their assigned role through PIM before they can access those elevated permissions.
In Microsoft Entra PIM, there are two types of role assignments:

Active: The user has immediate access to the role’s permissions.
Eligible: The user must activate the role before gaining access. This activation may require:
- Multi-Factor Authentication (MFA)
- Business justification
- Approval from designated approvers

Until the role is activated, the user does not have the permissions, which triggers the error message.
I would recommend you to follow below steps;