Which feature provides time-bound, approval-gated elevation to a privileged role?

1. A Conditional Access
2. ✓ B Privileged Identity Management (PIM) (correct answer)
3. C Managed identities
4. D Azure Policy

Shortcut: PIM makes roles eligible rather than permanently active, requiring just-in-time activation with optional MFA, approval, and justification, all of which is audited.