Get-PSSessionCapability

Get-PSSessionCapability
    [-ConfigurationName] <String>
    [-Username] <String>
    [-Full]
    [<CommonParameters>]

The Get-PSSessionCapability cmdlet gets the capabilities of a specific user on a constrained session configuration. Use this cmdlet to audit customized session configurations for users.

Starting in Windows PowerShell 5.0, you can use the RoleDefinitions property in a session configuration (.pssc) file. Using this property lets you grant users different capabilities on a single constrained endpoint based on group membership. The Get-PSSessionCapability cmdlet reduces complexity when auditing these endpoints by letting you determine the exact capabilities granted to a user.

By default, the Get-PSSessionCapability cmdlet returns a list of commands the specified user can run in the specified endpoint. This is equivalent to the user running Get-Command in the specified endpoint. When run with the Full parameter, this cmdlet returns an InitialSessionState object. This object contains details about the Windows PowerShell runspace the specified user would interact with for the specified endpoint. It includes information such as Language Mode, Execution Policy, and Environmental Variables.

PS C:\> Get-PSSessionCapability -ConfigurationName "Endpoint1" -Username "CONTOSO\EvanNa"

This example returns the commands available to the user CONTOSO\EvanNa when connecting to the Endpoint1 constrained endpoint on the local computer.

PS C:\> Get-PSSessionCapability -ConfigurationName "Endpoint1" -Username "CONTOSO\PattiFul" -Full

This command returns details about the runspace the user CONTOSO\PattiFul would interact with when connecting to the Endpoint1 constrained endpoint.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.