privilegedRole: selfActivate

Important: APIs under the /beta version in Microsoft Graph are in preview and are subject to change. Use of these APIs in production applications is not supported.

Activate the role that is assigned to the requestor.


The following scopes are required to execute this API: Directory.AccessAsUser.All

The requestor can only call selfActivate for the role that is assigned to him.

HTTP request

POST /privilegedRoles/{id}/selfActivate

Note that <id> is the target role id.

Request headers

Name Description
Authorization Bearer {token}. Required.

Request body

In the request body, provide a JSON object with the following parameters.

Parameter Type Description
reason string Optional. Description about the reason for this role activation.
duration string Optional. Valid values could be min (minimal activation duration), default (default activation duration for the role), or a double value to specify how many hours is the activation. The specified duration cannot be longer than the role's activation duration from the role setting.
ticketNumber string Optional. The ticket number that is used to tracking this role activation.
ticketSystem string Optional. The ticket system.


If successful, this method returns 200, OK response code and privilegedRoleAssignment object in the response body.

Note that the tenant needs to be registered to PIM. Otherwise, the HTTP 403 Forbidden status code will be returned.


Here is an example of how to call this API.


Here is an example of the request.

Content-type: application/json
Content-length: 142

  "reason": "reason-value",
  "duration": "duration-value",
  "ticketNumber": "ticketNumber-value",
  "ticketSystem": "ticketSystem-value"

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-type: application/json
Content-length: 184

  "id": "id-value",
  "userId": "userId-value",
  "roleId": "roleId-value",
  "isElevated": true,
  "expirationDateTime": "2016-10-19T10:37:00Z",
  "resultMessage": "resultMessage-value"