MIM PAM Terminate active Role

Question

Hello guys

Is it possible to terminate an active role request for a user who is elevated for a current role in pam while the session is active incase i want to deactivate it immediately

I’ve tried the closePamRequest but nothing happens and the access to retrieved only when the defined TTL is done

Answer 1

Closing the request will take effect on the next run, so you'd have to trigger a cycle for the changes to take effect. If the user is already granted a token in the protected forest, that token would have to expire before the functional permission is removed. If you need to have it take effect more quickly, change the TTL for the token in the protected forest.

https://learn.microsoft.com/en-us/microsoft-identity-manager/pam/principles-of-operation