Delegating control in Hyper-V

In some companies, it is common practice to have different access levels for systems, such as administrator, service desk or backup operators, and auditor. When implementing virtual servers using Hyper-V, it is also important to reflect these different access levels.

This new version of Hyper-V makes this task easier through the use of a feature called Just Enough Administration (JEA). JEA is a PowerShell security technology that allows you to configure different levels of access, by taking a role-based access control (RBAC) approach, for any task that can be managed with the use of PowerShell and or PowerShell Direct.

JEA enables authorized users to run specific PowerShell commands in an elevated context on a remote machine or endpoint, and in our case, this will be a Hyper-V host. JEA is included in PowerShell version 5 and onwards and works with JEA-enabled systems such as Windows Server 2016, Windows 10, and older operating systems, with the applicable Windows...