Technical overview
JEA is a new addition to the existing session configurations that were introduced with PowerShell 2 and PowerShell 3. JEA adds role-based access control (RBAC) on top of session configurations, so that sessions can be constrained more granularly. In addition to that, the ability to use temporary, virtual Run As accounts and group-managed service accounts has been added. Before that, only the entire endpoint could be executed with a different set of credentials.
It allows unprivileged user accounts to access high-privilege resources by allowing only a small subset of cmdlets with constrained parameters and transcription enabled. Done right, it also reduces the number of members of the local administrators group on a server, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access