Azure PIM with role Azure AD joined administrator approval can't elevate permissions

Question

We have a user who requests through PIM a request to receive the Azure AD joined administrator role on his PC (AD joined) to format a pendrive.

We see that despite having the administrator role assigned, he is not allowed to format the flash drive, the screen displays the message "The requested operation requires elevation".

I am supposed to be able to do it with the Azure AD joined administrator role. What could go wrong then?

Regards.

Answer 1

@Diego Ramírez

Thank you for your post and I apologize for the delayed response!

Error Message:

The requested operation requires elevation

I understand that one of your user's elevated their permissions through PIM in order to act as an Azure AD admin to format a pen/flash drive, but they're running into the above error message. To hopefully help point you in the right direction or resolve your issue, I'll share my findings below.

---

Findings:

When it comes to PIM and managing the device administrator role(s), please keep in mind that updating the device administrator role doesn't necessarily have an immediate impact on the affected users. On devices where a user is already signed into, the privilege elevation takes place when both the below actions happen:

• Up to 4 hours have passed for Azure AD to issue a new Primary Refresh Token with the appropriate privileges.
• User signs out and signs back in, not lock/unlock, to refresh their profile.

It could also be possible that the user needs to open/format the flash drive as a Local Administrator. To do this, they can right-click on the drive and select Run as administrator, or open Properties select the compatibility tab and check the box shown before Run this Program as an administrator.

---

Additional Links:

• Manually elevate a user on a device
• Fix the Requested Operation Requires Elevation Error on Windows PC - 3rd party solution

I hope this helps!

If you have any other questions or are still having issues, please let me know. Thank you for your time and patience throughout this issue.

---

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.