PAM is based on the just-in-time (JIT) administration concept. Back in 2014, Microsoft released the PowerShell tool kit, which allows just enough administration (JEA). Let's assume you are running a web server in your infrastructure. As part of the operation, every month you need to collect some logs to make a report. You've already set up a PowerShell script for it. Someone in your team needs to log in to the system and run it. In order to do so, you require administrative privileges. Using JEA, it is possible to assign the required permissions for the user to run only that particular program. In this way, there's no need to add the user to the Domain Admin group. The user will not be allowed to run any other ...
What is the logic behind PAM?
Get Mastering Active Directory now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
