A night-harbor superintendent should become subscription Owner only while a lock is jammed, not for the entire month. Which PIM assignment type for that Azure resource role fits?
Select an answer to reveal the explanation.
Short Explanation
Eligible is the spare captain’s hat on the hook—you put it on when the lock jams, then hang it back up. Active Owner means the hat never leaves your head all month. JIT VM access is a different door entirely; it is not subscription Owner.
Full Explanation
In Microsoft Entra Privileged Identity Management for Azure resources, eligible assignments require just-in-time activation before permissions take effect, while active assignments are effective immediately. Standing Owner for rare incidents violates least privilege; JIT VM access addresses VM management ports, not Azure RBAC Owner activation.