markdomansky / WebJEA

WebJEA - Secure Self Service Web Forms from PowerShell Scripts
GNU General Public License v3.0
237 stars 28 forks source link

Setting Role and Session capabilities #16

Closed lastusrnameon3 closed 4 years ago

lastusrnameon3 commented 5 years ago

Using the guide here: https://docs.microsoft.com/en-us/powershell/jea/role-capabilities

I've created a new Role Capabilities and Session configuration file to limit user access to only a few CmdLets. How do i config WebJea to use the new configurations ?

markdomansky commented 5 years ago

WebJEA doesn't depend on JEA, but will work with it. Your configuration would look something like this:

WebJEA configured to use ServiceAccount1 ServiceAccount1 granted access to the JEA endpoint PS1 configured to accept parameters needed, and calls the JEA endpoint (invoke-command or similar) PS1 configured on WebJEA Users granted access to WebJEA

The user would go to WebJEA, fill out the parameters, then click submit. WebJEA would execute the command and return the output.

If you're looking for a console interface on the web, look into PowerShell Web Access.

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.