Microsoft IT manages elevated access for Azure services using Azure Active Directory (AD) Privileged Identity Management (PIM). Azure AD PIM helps reduce risks related to elevated access by providing just-in-time access for users with privileged roles.