Azure Stack Hub privileged endpoint reference

  • Article

The Azure Stack Hub privileged endpoint (PEP) is a pre-configured remote PowerShell console that provides you with the capabilities to perform a required task. The endpoint uses PowerShell JEA (Just Enough Administration) to expose only a restricted set of cmdlets.

Privileged endpoint cmdlets

Cmdlet Description
Close-PrivilegedEndpoint No description.
Get-ActionStatus Gets the status of the latest action for the operation with the specified function name.
Get-AzsDnsForwarder Get the DNS forwarder IP addresses used by Azure Stack Hub
Get-AzSDnsServerSettings Get DNS server settings
Get-AzSLegalNotice Get legal notice caption and text
Get-AzureStackLog Get logs from various roles of AzureStack with timeout.
Get-AzureStackStampInformation Gets the stamp information.
Get-AzureStackSupportConfiguration Gets Support Service configuration settings.
Get-CloudAdminPasswordRecoveryToken No description.
Get-CloudAdminUserList No description.
Get-ClusterLog No description.
Get-GraphApplication Get-GraphApplication is a wrapper function to get the Graph application information for the application Name or Identifier specified.
Get-StorageJob No description.
Get-SupportSessionInfo No description.
Get-SupportSessionToken No description.
Get-SyslogClient Gets the syslog Client settings.
Get-SyslogServer Gets the syslog server endpoint.
Get-ThirdPartyNotices No description.
Get-TLSPolicy No description.
Get-VirtualDisk No description.
Invoke-AzureStackOnDemandLog Generates on demand logs from AzureStack roles where applicable.
New-AzureBridgeServicePrincipal Creates a new service principal in Microsoft Entra ID.
New-AzureStackActivation Activate Azure Stack.
New-CloudAdminUser No description.
New-GraphApplication New-GraphApplication is a wrapper function to call ADFS Graph cmdlets on AD FS.
New-RegistrationToken Creates a new registration token
Register-CustomAdfs Script to register custom Active Directory Federation Service (ADFS) as claims provider with Azure Stack AD FS.
Register-CustomDnsServer Script to register custom DNS servers with Azure Stack DNS.
Register-DirectoryService Script to register customer Active Directory with Graph Service.
Remove-AzureStackActivation No description.
Remove-CloudAdminUser No description.
Remove-GraphApplication Remove-GraphApplication is a wrapper function to call ADFS Graph cmdlets on AD FS.
Repair-VirtualDisk No description.
Reset-DatacenterIntegrationConfiguration Script to reset Datacenter Integration changes.
Send-AzureStackDiagnosticLog Sends Azure Stack Diagnostic Logs to Microsoft.
Set-AzSLegalNotice Set legal notice caption and text
Set-AzsDnsForwarder Update the DNS forwarder IP addresses used by Azure Stack Hub
Set-AzSDnsServerSettings Update DNS server settings
Set-CloudAdminUserPassword No description.
Set-GraphApplication Set-GraphApplication is a wrapper function to call ADFS Graph cmdlets on AD FS.
Set-ServiceAdminOwner Script used for both Microsoft Entra ID and AD FS systems to update the service administrator.
Set-SyslogClient Imports and applies syslog client endpoint certificate.
Set-SyslogServer Sets the syslog server endpoint.
Set-Telemetry Enables or disables the transfer of telemetry data to Microsoft.
Set-TLSPolicy No description.
Start-AzsCryptoWipe Performs cryptographic wipe of Azure Stack Hub infrastructure.
Start-AzureStack Starts all Azure Stack services.
Start-SecretRotation Triggers secret rotation on a stamp.
Stop-AzureStack Stops all Azure Stack services.
Test-AzureStack Validates the status of Azure Stack.
Unlock-SupportSession No description.

Next steps

For more information about the Privileged Endpoint on Azure Stack Hub, see Using the privileged endpoint in Azure Stack.