Just Enough Administration
Just Enough Administration (JEA) leverages PowerShell remoting to allow administrative delegation via a remoting session.
JEA consists of:
- A session configuration file that describes the commands to be made available and language modes.
- A registered PSSession configuration that is created based on that file.
- Access control that is set on the PSSession configuration.
JEA documentation can be found in the PowerShell reference: https://learn.microsoft.com/powershell/scripting/learn/remoting/jea/overview.
JEA configuration is defined in a session configuration file. The file is saved as a PowerShell data file (a PSSC
file, the same format as psd1
files) and is used to define and register the JEA remoting endpoint.
Microsoft has a couple of small archived examples that can be viewed on GitHub: https://github.com/PowerShell/JEA.
JEA can be configured manually, as shown in the following sections, or using a DSC configuration...