# IAM Management

Install IAM management to enable Just‑in‑Time (JIT) access to Azure resources through P0.

{% hint style="warning" %}
Complete [Azure app registration](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/azure-app-registration) before starting this step. IAM management requires the service identity created during app registration.
{% endhint %}

## Setup steps

1. In the Azure integration on [p0.app](https://p0.app), select **IAM Management**.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-a4184b89caa9e41cf90b9a9bb0697c3fa6130b7e%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

2. Run the Shell or Terraform steps shown.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-142cc69b7ca9762fabcbd42e27883d15bf2d7f7b%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-a54d9238b9ad9a44a7dce628c84e52121760780c%2Fimage%20(250).png?alt=media" alt=""><figcaption></figcaption></figure>

After these commands finish, JIT access through P0 is set up for the given subscription.

## Next step

* To enable SSH for Azure VMs, proceed to [Configure bastion host integration](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/configure-bastion-host-integration).
* To start requesting JIT access, see [Requesting access](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/requesting-access).