pim-az-0107 Azure PIM policy requires MFA -- the engine can never satisfy it
What it means
The PIM policy of an Azure role requires multifactor authentication for an active assignment, which the engine can never do. Only this assignment: it is not made. Everything else is applied.
| Code | pim-az-0107 |
|---|---|
| Who acts | You |
| Action | You act: follow the steps below. |
| Named since | PIM Manager 2.4.638 |
What to do
- You: Open Jobs > Engine logs & errors, press "Make it Eligible" on the item and commit in Pending changes.
- You: Or take the multifactor requirement for active assignment out of the policy of that role (Policy templates) and commit.
- Nobody - nothing to do: It turns OK by itself on the next run. Nothing has to be acknowledged.
Applies to
- Needs: azureRbac
Written by the PIM Manager team; Invardia publishes it. Quote the code when you contact support@invardia.com. · All PIM Manager error codes