Using Azure AD Privileged Identity Management (PIM), can a user activate a role when he had Assignment type set to Active but the assignment already expired?