@Lee_Holmes I’ve used this very feature recently on a storage container I was using to hold eventhub captures from a production instance. All configured from terraform. The capture and rule worked well. But trying to access the blobs was a bit of a nightmare. I ended up using a connection string to access the blob, because while I could elevate my access via a pim (to owner) and read the container, I could not access the blobs inside it. After mucking around for too long I just used my pim access to view the connection string and configured the python sdk to use that. #AzureStorage #AzurePIM
Next time your users complain about how cumbersome the activation of an Azure role would be using PIM, show them this video.
I do this step every single day, avoiding having admin roles on a permanent basis. #AzurePIM