Set environment variables to be preserved by dzdo

Specify the default list of environment variables to preserve in the user’s environment. This group policy applies only if you have selected the Reset environment variables option for the command in Access Manager.

If you set this group policy to Not configured or Disabled, the default list of variables displayed when you run the dzdo -V command as root is preserved.

If you set this group policy to Enabled, you can specify variables to preserve in addition to the default list of variables. Variables that you specify must be formatted as a comma-separated list. For example:


This group policy provides functionality equivalent to setting the env_keep flag for configuring sudo operation.

This group policy modifies the dzdo.env_keep setting in the agent configuration file.