Command plans
A command plan is a named, ordered set of steps that Netwrix Privilege Secure for Access Management (Privilege Secure) runs on a resource to manage an account. Privilege Secure uses command plans on platforms that it manages with commands instead of a directory service. Typical tasks are creating or removing a user, setting a password, and setting a Secure Shell (SSH) key.
Where command plans apply
| Platform | How Privilege Secure runs the plans |
|---|---|
| Linux | Runs commands over SSH. |
| BSD | Runs commands over SSH. |
| Cisco | Runs commands over SSH. |
| Palo Alto PanOS | Calls the PAN-OS application programming interface (API). |
The service account that you assign to the resource runs the commands. For Linux, the account needs permission to run them. See Target environments.
Privilege Secure ships the plans for each of these platforms.
Command plans in the console
A default installation doesn't show the Command Plans tab on a platform. A platform shows one form with no tabs, as described in Platforms.
The tab appears only on a copy of a platform that ships command plans, and only when the custom platform connector feature is turned on for your installation.
Updates restore the built-in plans
When you update Privilege Secure, the update restores the built-in command plans to the version that ships with the release. You lose changes that you make to a built-in plan. The update keeps plans that aren't built in.
Starting in 26.07.3, each update restores the built-in command plans.
The update removes only the plans flagged as built in and imports them again from the files that ship with the release. It doesn't change plans that you created.