PIM: Mandatory justification when approving requests

Question

In PIM, whatever Activation & Assignment settings I put in the role, when approving the role, I will always have to enter justification.

Is the justification mandatory when approving a role? I couldn't find anything about that in Microsoft Learn.

If there's a way to not change this to not require justification, let me know.

Answer 1

Hi @Pentti Nakari

Thank you for posting this in Microsoft Q&A.

I understand you are asking if it's mandatory to enter justification when approving a role in PIM (Privileged Identity Management) in Microsoft Azure.

Is the justification mandatory when approving a role? If there's a way to not change this to not require justification.

Yes, it is mandatory when approving a PIM role. Unfortunately, there is no way to change justification.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If the answer is helpful, please click "Accept Answer" and kindly "upvote" it.

Answer 2

Hi Pentti,

It is possible to remove it, but I do not recommend it. The justification encourages users to think about why they are asking for permission and not just enable it, which can save them a few minutes later if needed. It is done in PIM management: Microsoft Entra Roles—Select Role—Edit Role. Then, you have the option shown below.