API · DEVELOPER REFERENCE
A reason, on request.
A small public API for getting one paste-ready Entra ID PIM justification at a time.
Quick start
GET
https://api.pimjustification.com/v1/justificationcurl 'https://api.pimjustification.com/v1/justification?role=Global%20Admin&sarcasmLevel=0'The API is public and does not authenticate to Entra ID. The optional role is caller-supplied metadata used to choose a more relevant collection.
Query parameters
| Parameter | Values | Default |
|---|---|---|
role | Official role name, supported alias, or template ID. Names are case-insensitive. | General collection |
sarcasmLevel | Integer 0 through 5. | 0 (Off) |
Examples include Global Admin, Security Admin, Intune Admin, and 62e90394-69f5-4237-9190-012177145e10. Recognized roles without tailored text use the general collection.
Response
{
"justification": "Reviewing tenant-wide identity configuration as part of an approved support activity.",
"sarcasmLevel": 0,
"sarcasmLabel": "Off",
"role": {
"name": "Global Administrator",
"templateId": "62e90394-69f5-4237-9190-012177145e10",
"tailored": true
},
"collection": "role"
}Randomized responses are sent with Cache-Control: no-store. Invalid role or tone values return a JSON 400 error.