Supported Actions for Run As User

Most Actions are run as the system or root user. Some Actions support being run as a specified user using Action User Profiles. The following table shows where running Actions as an Action User Profile is supported.

Run-as-User Actor and Login Type →	Windows (Interactive)	Windows (Non-Interactive)	Mac	Linux	Notes
Action Type ↓	Windows (Interactive)	Windows (Non-Interactive)	Mac	Linux	Notes
Captive IOC					Not supported
Cloud					Not supported
DNS	✔	✔
Email					Not supported
Endpoint - Host CLI		✔	✔	✔	On Windows Actors, the Director always runs non-protected Host CLI actions non-interactively. On Mac and Linux Actors, run as user is done through `sudo`.
Network (File Transfer, PCAP, Port Scan, Web)	✔	✔			Some specific actions fail if they are run with a non-admin user (for example, DNS-tunneled file transfer actions)
Protected (Host CLI Action run on a Protected Actor)	✔			✔	Protected Actions are not supported on Mac, because Protected Theater does not support macOS guests. With Protector Actors on Windows, the Director always runs Protected Host CLI actions interactively.