Deactivate PIM for Azure AD

Question

I have previously activated Azure AD PIM for several admin roles. Now my Premium P2 licenses have expired and I can no longer use PIM, however the roles have not reverted back from Eligible to Permanent. The effect of this is that I can no longer access the Admin portal or perform any administrative tasks using my account. Of course, I have a Permanent role assignment to a cloud-only admin with which I am a Global Admin. However, I want to deactivate PIM entirely as it is useless without P2 licenses. I expected it to happen automatically when the licenses expire, but it did not. What can I do in this case?

Answer 1

OK, found it - the users are not automatically reassigned their permanent roles after PIM is deactivated - needed to re-add them to the relevant administrative groups for them to regain access.