Just enough administration
JEA was first introduced in 2014, and it was the first approach toward the JIT. JEA allows you to provide role-based privileges instead of full administrative privileges. As an example, the Rebeladmin Corp. IT team monthly runs a set of PowerShell scripts to generate reports for the monthly resource usage of its private cloud. A member of the IT team logs into a server monthly and runs these scripts. The individuals who run these reports are Domain Admins as they need administrative privileges. These users do not need Domain Admin privileges for their day-to-day helpdesk tasks. Using JEA, we can assign just enough privileges to run these scripts from specific hosts instead of providing Domain Admin privileges. This ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access