PIM error cannot activate roles

Question

PIM error cannot activate roles

Mark Dunn 35

Has anyone experienced this error and how do I know MS is fixing it

Mark Dunn 35 Reputation points

2025-12-22T16:32:02.8366667+00:00

azure-privileged-identity-management and azure-ad.
Mark Dunn 35 Reputation points

2025-12-22T16:32:55.0633333+00:00

please see screen shot.
Darry Ramai 0 Reputation points

2025-12-22T17:20:53.5+00:00

Having problem also with trying to assign myself roles via Azure Privileged Identity Management. I don't even get an error after clicking the Assign option, the option to set the amount of time access & provide a justification comes up, but is greyed out. Tried another web browser, computer, different network, & non non-Entra ID joined system/Intune managed system.
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-12-23T00:07:12.8766667+00:00

Hello Mark Dunn,

Known issue:

https://admin.cloud.microsoft/?#/servicehealth/:/alerts/IS1202804

Users may intermittently be unable to activate Microsoft Entra ID roles in Privileged Identity Management (PIM)

Issue ID: IS1202804

Affected services: Microsoft Entra

Status: Service degradation

Issue type: Advisory

Start time: Dec 22, 2025, 11:10 AM EST

User impact

Users may intermittently be unable to activate Microsoft Entra ID roles in PIM.

More info

If impact occurs, we advise that users wait a few minutes and then try again, as subsequent attempts may be successful.

Scope of impact

Any user attempting to activate Microsoft Entra ID roles in PIM may be intermittently impacted.

Current status

Dec 22, 2025, 1:29 PM EST

We've reverted the configuration update but telemetry indicates that impact persists. We've identified a recent build update that may be contributing to impact and we're reverting the service back to the last known good build as a potential method of resolving this issue. Additionally, we've implemented performance improvements to increase request processing rates and mitigate the risk of resource constraints as another possible remediation stream.

Next update by:

Monday, December 22, 2025 at 3:30 PM EST
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-12-23T00:18:41.4266667+00:00

Hello Mark Dunn, Service is restored please check!
Johnson, Russell 0 Reputation points

2026-02-25T19:38:15.9533333+00:00

My PIM has always allowed me to go into our Exchange Admin and create mail flow rules blocking or diverting email. I can't do this under just activating my PIM anymore, I must go back into Entra Roles and individually activate the Exchange Admin role as well now. This hasn't been the case until this past month. Unless I do this, for excample, the "Add new mail flow" rule is not visible or accessible. Only after I activate the Exchange Admin Role can I see and use "Add" to add a new mail flow rule.

Your answer

Mark Dunn 35 Reputation points

2025-12-22T16:32:02.8366667+00:00

azure-privileged-identity-management and azure-ad.
Mark Dunn 35 Reputation points

2025-12-22T16:32:55.0633333+00:00

please see screen shot.
Darry Ramai 0 Reputation points

2025-12-22T17:20:53.5+00:00

Having problem also with trying to assign myself roles via Azure Privileged Identity Management. I don't even get an error after clicking the Assign option, the option to set the amount of time access & provide a justification comes up, but is greyed out. Tried another web browser, computer, different network, & non non-Entra ID joined system/Intune managed system.
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-12-23T00:07:12.8766667+00:00

Hello Mark Dunn,

Known issue:

https://admin.cloud.microsoft/?#/servicehealth/:/alerts/IS1202804

Users may intermittently be unable to activate Microsoft Entra ID roles in Privileged Identity Management (PIM)

Issue ID: IS1202804

Affected services: Microsoft Entra

Status: Service degradation

Issue type: Advisory

Start time: Dec 22, 2025, 11:10 AM EST

User impact

Users may intermittently be unable to activate Microsoft Entra ID roles in PIM.

More info

If impact occurs, we advise that users wait a few minutes and then try again, as subsequent attempts may be successful.

Scope of impact

Any user attempting to activate Microsoft Entra ID roles in PIM may be intermittently impacted.

Current status

Dec 22, 2025, 1:29 PM EST

We've reverted the configuration update but telemetry indicates that impact persists. We've identified a recent build update that may be contributing to impact and we're reverting the service back to the last known good build as a potential method of resolving this issue. Additionally, we've implemented performance improvements to increase request processing rates and mitigate the risk of resource constraints as another possible remediation stream.

Next update by:

Monday, December 22, 2025 at 3:30 PM EST
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-12-23T00:18:41.4266667+00:00

Hello Mark Dunn, Service is restored please check!
Johnson, Russell 0 Reputation points

2026-02-25T19:38:15.9533333+00:00

My PIM has always allowed me to go into our Exchange Admin and create mail flow rules blocking or diverting email. I can't do this under just activating my PIM anymore, I must go back into Entra Roles and individually activate the Exchange Admin role as well now. This hasn't been the case until this past month. Unless I do this, for excample, the "Add new mail flow" rule is not visible or accessible. Only after I activate the Exchange Admin Role can I see and use "Add" to add a new mail flow rule.