Scripts
Create, target, and run command sequences on managed endpoints, and read the result of every endpoint.
What Scripts Are#
Scripts are reusable command sequences that run on managed endpoints. They are the on-demand counterpart to automations: the same execution capability, triggered by a person instead of an event.
Need a starting point? Copy a tested script from the script library.
Because a script can change a device, the platform treats it as a sensitive operation: it needs an explicit target, an explicit confirmation, and it is recorded per endpoint.
Creating a Script#
A script definition has five parts. Fill them in so the next operator does not have to read the body to understand the intent:
| Field | What it controls |
|---|---|
| Name and description | Identifies the script in the library and explains what it does to the next operator. |
| Target operating system | Scripts are written for a specific shell, so the operating system decides which interpreter runs them. |
| Script body | The command sequence the agent executes on the endpoint. |
| Target scope | Groups, profiles, tags, or individual endpoints the script may run on. |
| Run as | Whether the script runs with system privileges or as the current operating system user. |
Running a Script#
- 1Select the script
Open the script from the library and review its body and target operating system before you run it.
- 2Choose the target
Select groups, profiles, tags, or individual endpoints. Run on one endpoint first when the script is new.
- 3Confirm the action
Running a script is a sensitive operation, so it requires an explicit confirmation. Review the resolved endpoint list in the confirmation step.
- 4Review the output
Each endpoint returns its own exit status and output. Read the failures individually; a partially successful run is the common case.
Results and Logging#
- Every endpoint reports its own exit status and output; results are not merged into one summary.
- A partially successful run is normal when endpoints differ, so read failures individually.
- The run is attributed to the operator who started it.
- Script execution is recorded in the activity log and the audit log.