Azure AD Privileged Identity Management

You have been asked to create a proof of concept that uses Azure Privileged Identity Management (PIM) to enable just-in-time administration and control the number of users who can perform privileged operations. The specific requirements are:

Create a permanent assignment of the aaduser2 Azure AD user to the Security Administrator role.
Configure the aaduser2 Azure AD user to be eligible for the Billing Administrator and Global Reader roles.
Configure the Global Reader role activation to require an approval of the aaduser3 Azure AD user
Configure an access review of the Global Reader role and review auditing capabilities.