Mastering Active Directory - Second Edition

What is the logic behind PAM?

PAM is based on the just-in-time (JIT) administration concept. Back in 2014, Microsoft released the PowerShell toolkit, which allows Just Enough Administration (JEA). Let's assume that you are running a web server in your infrastructure; as part of the operation, you need to collect some logs every month to make a report. You've already set up a PowerShell script for this purpose. Someone in your team needs to log in to the system and run it. In order to do so, you require administrative privileges. Using JEA, it is possible to assign the required permissions for the user to run only that particular program. In this way, there's no need to add the user to the Domain Admin group. The user will not be allowed to ...