For a long time, I’ve been looking for a good way to let people run PowerShell scripts that do things they would not be able to with their own accounts. PS Universal seems like a great solution. I can get input from users, and execute commands in a controlled fashion with elevated permissions.
However, there’s a big issue at this point. If I make them Operators in PS Universal, they can execute scripts but also change them. Which means I’ve given them rights not only to perform specific tasks as an elevated user, but anything they want to change the code to do.
Are there any ideas about how I can work around this limitation?