Command plans
A command plan is a named, ordered set of steps that Netwrix Privilege Secure for Access Management (Privilege Secure) runs on a resource to manage an account. Privilege Secure uses command plans on platforms that it manages with commands instead of a directory service. Typical tasks are creating or removing a user, setting a password, and setting a Secure Shell (SSH) key.
Where command plans apply
| Platform | How Privilege Secure runs the plans |
|---|---|
| Linux | Runs commands over SSH. |
| BSD | Runs commands over SSH. |
| Cisco | Runs commands over SSH. |
| Palo Alto PanOS | Calls the PAN-OS application programming interface (API). |
The service account that you assign to the resource runs the commands. For Linux, the account needs permission to run them. See Target environments.
Privilege Secure ships the plans for each of these platforms.
View and edit command plans
When the custom platform connector feature is enabled, these platforms show Settings and Command Plans tabs: Linux, BSD, Palo Alto PanOS, and the platforms that you create or copy. Select the Command Plans tab to view and edit the command plans of the platform. The other built-in platforms show one form with no tabs.
For the steps to build a custom platform, see Creating a custom platform for SSH activity sessions.
Updates restore the built-in plans
When you update Privilege Secure, the update restores the built-in command plans to the version that ships with the release. You lose changes that you make to a built-in plan. The update keeps plans that aren't built in.
Starting in 26.07.3, each update restores the built-in command plans.
The update removes only the plans flagged as built in and imports them again from the files that ship with the release. It doesn't change plans that you created.