The PIM Activation Emergency

It is a Sunday evening. A critical security incident has been declared: ransomware has been detected on 3 VMs and the Incident Response team needs to immediately revoke access for a potentially compromised admin account (m.chen@fabrikam.com) before the ransomware spreads further. The problem: the Security Operations Manager who needs to make the change has Global Administrator as an Eligible PIM role — not Active. When she tries to activate it, the activation is failing with: "Request is pending approval." Her PIM settings require manager approval to activate Global Admin. Her manager is on holiday with no phone signal. Additionally, the PIM portal itself is showing a warning: "Azure AD P2 licence expires in 2 days."