---
title: Create Temporary Access Pass
description: "After you enable a TAP policy, you can create a TAP policy for users in Microsoft Entra ID. The following roles can perform various actions related to a TAP. - [Privileged Authentication Administrators](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#privileged-authentication-administrator) can create, delete, and view a TAP for…"
url: "https://forsynse.com/kb/create-temporary-access-pass/"
updated: "2025-11-10"
category: Microsoft365
---

# Create Temporary Access Pass

After you enable a TAP policy, you can create a TAP policy for users in Microsoft Entra ID. The following roles can perform various actions related to a TAP.

- [Privileged Authentication Administrators](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#privileged-authentication-administrator) can create, delete, and view a TAP for admins and members (except themselves).
- [Authentication Administrators](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#authentication-administrator) can create, delete, and view a TAP for members (except themselves).
- [Authentication Policy Administrators](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#authentication-policy-administrator) can enable TAP, include or exclude groups, and edit the Authentication methods policy.
- [Global Readers](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#global-reader) can view TAP details for the user (without reading the code itself).

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) as at least an [Authentication Administrator](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#authentication-administrator).
2. Browse to **Entra ID** > **Users**.
3. Select the user you would like to create a TAP for.
4. Select **Authentication methods** and select **Add authentication method**.![Screenshot of how to create a Temporary Access Pass.](https://learn.microsoft.com/en-us/entra/identity/authentication/media/how-to-authentication-temporary-access-pass/create.png)
5. Select **Temporary Access Pass**.
6. Define a custom activation time or duration and select **Add**.![Screenshot of adding a method - Temporary Access Pass.](https://learn.microsoft.com/en-us/entra/identity/authentication/media/how-to-authentication-temporary-access-pass/add-method.png)
7. Once added, the details of the TAP are shown. ImportantMake a note of the actual TAP value, because you provide this value to the user. You can't view this value after you select **Ok**.![Screenshot of Temporary Access Pass details.](https://learn.microsoft.com/en-us/entra/identity/authentication/media/how-to-authentication-temporary-access-pass/details.png)
8. Select **OK** when you're done.

[https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass#create-a-temporary-access-pass](https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass#create-a-temporary-access-pass)