Create a Temporary Access Pass for Global Admin

Question

Hi, my laptop got repaired. Then, I went through the BitLocker process successfully. Now, the windows asked me to set up my PIN again. After I clicked the set up button, Microsoft account asked me to get a Temporary Access Pass. Then I enabled the TAP policy on Azure. Then I went to Users on Azure. The issue now is that I could not click "Add authentication methods" button. I guess that is because I am the Global Admin.

In this case, how can I create a TAP for myself when I am the Global Admin?

Thanks.

 

Answer 1

Hi Leon,

You could create/use a separate admin user to create the TAP for your global admin account. For example, you could create a new user that is assigned Privileged Authentication Administrators role and then use that account to create the TAP. Or you could use your break glass global admin account.

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-temporary-access-pass#create-a-temporary-access-pass

Please click Accept Answer if the above was useful.

Thanks.

-TP