PowerShell Genie

Just Enough Administration (JEA)

JEA lets you give someone exactly the permissions they need — nothing more.

How It Works

  1. Role Capability file — defines allowed cmdlets.
  2. Session Configuration file — defines who can connect.
  3. Register the endpoint — makes it available.

Create a Role

New-PSRoleCapabilityFile -Path HelpDesk.psrc -VisibleCmdlets Restart-Service, Get-Service

Register

New-PSSessionConfigurationFile -Path HelpDesk.pssc -SessionType RestrictedRemoteServer
Register-PSSessionConfiguration -Path HelpDesk.pssc -Name HelpDesk -Force
Genie guideJEA Constrained Endpoints

Build Just Enough Administration endpoints: role capabilities, session configurations, and least-privilege remoting.

Explore PowerShell Genie

Related
Stuck? Re-read the section, then try the filter yourself.