{
  "_comment": "Helpdesk Administrator: PIM role settings as code, from Book 04, Appendix B (T2). Review a change to this file as a change to the tenant. Approvers are named by alias; the tenant's bindings file gives each alias its group object ID.",
  "role": "Helpdesk Administrator",
  "roleTemplateId": "729827e3-9c14-49f7-bb1b-9608f156bbb8",
  "tier": "T2",
  "activation": {
    "maximumDuration": "PT8H",
    "authenticationContext": "c1",
    "requireMfa": false,
    "requireJustification": true,
    "requireTicket": true
  },
  "approval": {
    "required": false,
    "approvers": [],
    "riskAcceptance": "Required on file before this role runs without approval (Appendix B, Tier 2)"
  },
  "assignment": {
    "allowPermanentEligible": false,
    "eligibleMaximumDuration": "P180D",
    "allowPermanentActive": false,
    "activeMaximumDuration": "P15D",
    "requireMfaOnActive": true,
    "requireJustificationOnActive": true
  },
  "eligibleTo": "PRV-T2-HelpdeskAdmin-<AU>"
}
