Set environment variables to be removed by dzdo

Specify the default list of environment variables to be removed from the user’s environment. This group policy applies only if you have selected the Remove unsafe environment variables option for the command in Access Manager.

If you set this group policy to Not configured or Disabled, the default list of variables displayed when you run the dzdo -V command as root is removed.

If you set this group policy to Enabled, you can specify variables to remove in addition to the default list of variables. Variables that you specify must be formatted as a comma-separated list. For example:


This group policy provides functionality equivalent to setting the env_delete flag for configuring sudo operation.

This group policy modifies the dzdo.env_delete setting in the agent configuration file.