---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Sudo banner validation

# Sudo banner validation {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Sudo banner validation flags missing sudo permissions on managed devices so you know when the DEX agent's capabilities are limited.

The DEX agent requires specific sudo permissions to perform actions such as restarting services (restart_service) or removing files (rm). The agent flags
missing required permissions.

As a DEX administrator, you can control the sudo banner configuration for macOS. For example, if your organization does not use Jamf, add that command to the exclusion list. In this case, the banner does not appear on the device page for excluded commands.  
Note:  
Updating the exclusion list doesn't change configured sudo permissions on the end-user device.
* **[Configure sudo banner exclusion list](https://www.servicenow.com/docs/F~eQoo0ec~hQMfLNiT0zIQ)**   
  Add the appropriate commands to the sudo banner exclusion list so the system doesn't flag them.