`thinkfleetbot approvals`
CLI reference for `thinkfleetbot approvals` (exec approvals for gateway or node hosts)
thinkfleetbot approvals
Manage exec approvals for the local host, gateway host, or a node host.
By default, commands target the local approvals file on disk. Use --gateway to target the gateway, or --node to target a specific node.
Related:
- Exec approvals: Exec approvals
- Nodes: Nodes
Common commands
thinkfleetbot approvals get
thinkfleetbot approvals get --node <id|name|ip>
thinkfleetbot approvals get --gatewayReplace approvals from a file
thinkfleetbot approvals set --file ./exec-approvals.json
thinkfleetbot approvals set --node <id|name|ip> --file ./exec-approvals.json
thinkfleetbot approvals set --gateway --file ./exec-approvals.jsonAllowlist helpers
thinkfleetbot approvals allowlist add "~/Projects/**/bin/rg"
thinkfleetbot approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"
thinkfleetbot approvals allowlist add --agent "*" "/usr/bin/uname"
thinkfleetbot approvals allowlist remove "~/Projects/**/bin/rg"Notes
--nodeuses the same resolver asthinkfleetbot nodes(id, name, ip, or id prefix).--agentdefaults to"*", which applies to all agents.- The node host must advertise
system.execApprovals.get/set(macOS app or headless node host). - Approvals files are stored per host at
~/.thinkfleetbot/exec-approvals.json.