JEA is a rather new feature of PowerShell that allows administrators to tightly lock down PowerShell remote access to servers with the ultimate goal to ban users from connecting via Remote Desktop.
JEA allows you to apply role-based access control to your remote sessions. This way, you can limit user capabilities rather elegantly.