For an Azure Stack Hub operator, most day-to-day operations are done through the Administration Portal or PowerShell. For some of the infrequent operations, you can use the Privileged Endpoint (PEP).

The PEP is a remote PowerShell console that provides you with PowerShell Just Enough Administration (JEA) to expose only a restricted set of cmdlets that you can use in the environment. The cmdlets allow you to check the status and health of Azure Stack Hub and access any logs for troubleshooting.

Before accessing the PEP for the first time, you must obtain the IP addresses of the VMs that host the PEP. In the Azure Stack Hub environment, the VMs are named AzS-ERCS01, AzS-ERCS02, and AzS-ERCS03. There are multiple instances of the PEP VMs, and each runs on a separate scale unit node for resiliency.

To obtain the PEP IP addresses:

1. Using a web browser, log in to the Azure Stack Hub Administration Portal, as shown in the following figure:
2. Click the Region management tile, and then click Properties.
3. In the Properties pane, to see the IP addresses, go to Privileged endpoint IP addresses, as shown in the following figure:
   
   
   
   

For more information about setting up PEP and ERCS connectivity, see Access the privileged endpoint on Microsoft | Documents.