A Microsoft Entra ID passcode valid for a limited time, used to onboard users or recover accounts. Its value can be viewed only when it is first created.
Also called TAP.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Temporary Access Pass in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra ID
Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.
- AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.
- FIRST
A DAX function available only inside visual calculations. It fetches the value at the start of one axis of the visual's matrix, which makes it handy for comparing each point with the first; its opposite is LAST.
Related terms
- Authentication methods policy
Tenant-level Microsoft Entra policy that switches on each sign-in method, such as FIDO2, Authenticator, certificate-based authentication, TAP or SMS, for chosen users or groups.
- Privileged Authentication Administrator
Role in Microsoft Entra able to manage authentication methods, such as issuing a Temporary Access Pass, for every user, Global Administrators included.
- Register security information
Lets a Conditional Access policy kick in at the moment someone enrols methods for MFA or SSPR, for instance demanding a Temporary Access Pass or a trusted location. Enrolment of Windows Hello for Business and macOS Platform SSO has been covered too since July 2026.