{
  "_program": {
    "version": "1.0.0",
    "tier": "T1",
    "accessPackageName": "Infrastructure administrator eligibility (PIM for Groups)",
    "resourceGroupIds": [
      "e1000000-0000-4000-8000-000000000031"
    ]
  },
  "displayName": "REQUEST Infrastructure administrator eligibility",
  "description": "ORG-210 staff may request eligibility; the role is activated through PIM",
  "allowedTargetScope": "specificDirectoryUsers",
  "specificAllowedTargets": [
    {
      "@odata.type": "#microsoft.graph.attributeRuleMembers",
      "description": "ORG-210 employees",
      "membershipRule": "(user.extensionAttribute10 -eq \"ORG-210\") -and (user.employeeType -eq \"Employee\")"
    }
  ],
  "expiration": {
    "type": "afterDuration",
    "duration": "P180D"
  },
  "requestorSettings": {
    "enableTargetsToSelfAddAccess": true,
    "enableTargetsToSelfUpdateAccess": false,
    "enableTargetsToSelfRemoveAccess": true,
    "allowCustomAssignmentSchedule": false,
    "enableOnBehalfRequestorsToAddAccess": false,
    "enableOnBehalfRequestorsToUpdateAccess": false,
    "enableOnBehalfRequestorsToRemoveAccess": false,
    "onBehalfRequestors": []
  },
  "requestApprovalSettings": {
    "isApprovalRequiredForAdd": true,
    "isApprovalRequiredForUpdate": false,
    "stages": [
      {
        "durationBeforeAutomaticDenial": "P14D",
        "isApproverJustificationRequired": true,
        "isEscalationEnabled": false,
        "durationBeforeEscalation": "PT0S",
        "primaryApprovers": [
          {
            "@odata.type": "#microsoft.graph.requestorManager",
            "managerLevel": 1
          }
        ],
        "fallbackPrimaryApprovers": [
          {
            "@odata.type": "#microsoft.graph.singleUser",
            "userId": "c1000000-0000-4000-8000-000000000010"
          }
        ],
        "escalationApprovers": [],
        "fallbackEscalationApprovers": []
      }
    ]
  },
  "accessPackage": {
    "id": "d1000000-0000-4000-8000-000000000031"
  }
}
