# Define the script to activate PIM roles

$script = {

    # Connect to Azure Government

    Connect-AzAccount -Environment AzureUSGovernment

​

    # Get all enabled PIM assignments

    $assignments = Get-AzRoleAssignment -ResourceType 'Microsoft.Authorization/roleAssignments' | Where-Object {$_.Properties.Status -eq 'Enabled'}

​

    # Prompt for the activation reason

    $activationReason = "Scheduled activation"

​

    # Activate each assignment

    foreach ($assignment in $assignments) {

        # Activate the role with a reason

        Start-AzRoleAssignmentActivation -RoleAssignmentId $assignment.Id -Reason $activationReason

    }

}

​