An organization has assigned several administrators to the Global Administrator and Security Administrator roles through Microsoft Entra Privileged Identity Management (PIM). The compliance team wants to periodically confirm that each administrator still requires their privileged role assignment, with the review recurring automatically every quarter. Which PIM capability should they configure?