Revoke-PASJustInTimeAccess

SYNOPSIS

Revoke JIT access to a target Windows machine

SYNTAX

Revoke-PASJustInTimeAccess [-AccountID] <String> [<CommonParameters>]

DESCRIPTION

Requests and receives access, with administrative rights, to a target Windows machine. The domain user who issuing the command will be removed from the local Administrators group of the target machine.

EXAMPLES

EXAMPLE 1

Revoke-PASJustInTimeAccess -AccountID 36_3

Revokes JIT access on the server for which the account with id 36_3 is a local account with local admin membership.

PARAMETERS

-AccountID

The ID of the local account that will be used to remove the authenticated user from the Administrators group on the target machine.

Type: String
Parameter Sets: (All)
Aliases: id

Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

https://pspas.pspete.dev/commands/Revoke-PASJustInTimeAccess

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/WebServices/GetAccess.htm