Skip to content
Just Enough Administration
Branch: master
Clone or download

Latest commit

rpsqrd Merge pull request #63 from bergmeister/patch-1
Fix markdown link to `DSC Resource` folder by using %20 to encode the space character that caused the broken link
Latest commit 35e3e9a Jul 25, 2019


Type Name Latest commit message Commit time
Failed to load latest commit information.
DSC Resource Update JustEnoughAdministration.psm1 Oct 16, 2018
Samples Update IIS-Lev2.psrc Apr 30, 2017
.gitattributes Updated gitattributes to allow diffing of PSRC files and normalized E… Feb 14, 2018
LICENSE.txt Added MIT license Feb 12, 2018 Fix markdown link to `DSC Resource` folder by using %20 to encode the… Jul 25, 2019

Just Enough Administration Samples and Resources

Just Enough Administration (JEA) is a PowerShell security technology that provides a role based access control platform for anything that can be managed with PowerShell. It enables authorized users to run specific commands in an elevated context on a remote machine, complete with full PowerShell transcription and logging. JEA is included in PowerShell version 5 and higher on Windows 10 and Windows Server 2016, and older OSes with the Windows Management Framework updates.

This repository contains sample role capabilities created by the Microsoft IT team and the official DSC resource that can be used to deploy JEA across your enterprise. General information and documentation for JEA has migrated to MSDN.


JEA documentation has moved to MSDN -- check it out at! In addition to making the documentation easier to find and read, you can now contribute to the documentation by submitting pull requests to the staging branch.

DSC Resource

The JEA DSC resource can help you quickly and consistently deploy JEA endpoints across your enterprise. The JustEnoughAdministration DSC resource configures the PowerShell session configurations, which define the mapping of users to roles and general session security settings. Role capabilities belong to standard PowerShell modules, and can be deployed with the DSC file resource. Check out the [Demo Config](./DSC Resource/DemoConfig.ps1) for an example of how to deploy a JEA endpoint using these DSC resources.

Sample Role Capabilities

Microsoft IT have been working with JEA since its inception and have shared some of their role capabilities for general server and IIS maintenance/support. Check them out to learn more about how to create role capability files or download them to use in your own environment!


Please see the DSC contribution guidelines for information on contributing to this project.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact with any additional questions or comments.

You can’t perform that action at this time.