Create a sudo command bundle

Create a sudo command bundle to enforce granular permissions for Okta Privileged Access users to access Linux-based servers. Each sudo command bundle can contain a maximum of 64 commands.

Before you begin

Start the task

  1. Go to Resource AdministrationSudo commands.

  2. Click Create sudo command.

  3. On the Create sudo command page, complete the following:

    Task Action
    Name and description Enter a name and description for the command in the Command name and description fields.

    Commands

    1. Select the type of sudo command.

      • Executable
      • Raw
      • Directory

    2. If you're configuring an executable command, you must specify which kinds of arguments the command takes by choosing one of the following arguments.

      • Any arguments
      • No arguments
      • Specific arguments
    3. If you select Specific arguments, enter the arguments to allow in the field that appears.
    Add another command Add more commands by clicking Add Another Command and repeating the previous step.

    Advanced configuration

    1. To access advanced configuration options for sudo commands, expand Advanced Configuration. These settings apply to all commands defined for a sudo command bundle.

    2. To run all of the commands defined in the sudo command bundle as a specific non-root user, enter the username in the Run commands as a non-root user field.

    3. Enable NOPASSWD is selected by default, allowing users to run sudo without a password. Ensure that this option is always enabled.

    4. Select Enable NOEXEC if you don't want to allow commands to execute child processes.

    5. Select Enable SETENV if you want to allow the overriding of environment variables to commands.

    6. You can further refine the environment variable settings for a sudo command by setting the env_keep += and env_keep -= arguments. See your system's sudo documentation for details.

  4. Click Create.

View, edit, or delete sudo commands

You can't delete a sudo command if it's being used in a policy.

  1. Go to Resource AdministrationSudo commands.

  2. On the command you want to view, click the Actions menu and select View. The View sudo commands page displays the command details.

Related topics

Sudo command bundle

Security policy