CIPP AdvancedInstall

Summary

Grant a user temporary just-in-time administrator access in the selected tenant by assigning the requested roles for a scheduled period. Choose whether to create a new JIT user or use an existing user; optional fields can specify a domain, template, reason, post-execution actions, and whether to generate a Temporary Access Password.

Inputs

• Tenant (required) — Tenant to perform the operation on, selected from the list or specified by domain.
• User Action (required) — Choose Create New User or Select Existing User.
• Admin Roles (required) — Admin role name or GUID to assign.
• Start Date (required) — When the JIT access begins.
• End Date (required) — When the JIT access expires.
• Expire Action (required) — Action to take when access expires, such as delete or disable.
• Use TAP — Whether to generate a Temporary Access Password; defaults to false.
• Additional Fields — Optional domain and JIT template as LabelValue JSON, first and last name and username for a newly created user, post-execution actions as a JSON array, and a reason for the access request.
• User ID (required) — When User Action is Select Existing User, identify the user by UPN or GUID.
• Normalize Numeric Strings — Whether to convert numeric-looking string values in the returned data to numbers; defaults to false.

Output shape

A single API response item for the JIT admin execution.

The operation performs a tenant-scoped access-grant action. User ID is shown and required only when selecting an existing user; name and username fields apply when creating a new user.

Links

• n8n community nodes installation guide