User1 is eligible for the Billing administrator role in Azure AD Privileged Identity Management. To ensure the role can only be used for up to two hours, which action should you take?

To limit the duration of a role activation to two hours, you must edit the role activation settings within Azure AD Privileged Identity Management (PIM). These settings define the maximum activation duration for eligible assignments. Creating a new access review is for periodically checking who still needs access, not for configuring activation duration. Updating the end date of the user assignment would set a fixed end date for the eligibility itself, not the activation period. Editing role assignment settings primarily deals with whether an assignment is eligible or active, and its permanent duration, not the temporary activation window.