Azure AD Privileged Identity Management can only be enabled by a Global Admin or a Subscription Admin with a premium subscription ...