A grain-elevator Owner activation last quarter remained valid until the next calendar day, and a contractor kept rights overnight. Which PIM control limits how long an activated Azure resource role stays effective?
Select an answer to reveal the explanation.
Short Explanation
Activation maximum duration is the kitchen timer on the Owner hat—dial it to a few hours inside the 1–24 range so nobody is still wearing elevated rights at breakfast. Sign-in frequency is a different clock and is not this PIM setting.
Full Explanation
PIM role settings for Azure resources include an activation maximum duration that bounds how long an activated eligible assignment remains effective. Documented values fall in a multi-hour range up to 24 hours. Conditional Access sign-in frequency and Defender for Cloud alerting do not replace that PIM duration setting.