---
title: "Action Governance Overview"
slug: "action-governance-overview"
description: "Use the Action Governance tab in SysTrack to view, import, approve, and export the actions that automations run on your systems."
status: "new"
updated: 2026-11-05T08:22:06Z
published: 2026-11-05T08:22:06Z
canonical: "documentation.lakesidesoftware.com/action-governance-overview"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.lakesidesoftware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Action Governance Overview

The **Action Governance** tab lists all actions that automations can run in SysTrack. To open it, go to **Configure** > **Tools** > **Automations and Collection Extensions** > **Action Governance**.

In SysTrack Cloud, you can build actions with **Create Action**. In both cloud and On-Premises, you can import actions that you build with LSActionBuilder. Before you import new actions into SysTrack, test them thoroughly on the relevant systems.

Every new or imported action waits for approval, and systems cannot run it until someone approves it. For the steps and the permissions, see [Approve and Enable Actions](/documentation/docs/approve-actions). After an action is approved, you can create an automation that uses it. See [Create Automations](/documentation/docs/create-automations-1).

## What an Action Contains

An action is a set of files that includes executable and supporting files. Executable files can be any file type that the target operating system can run natively, for example batch files, executables, or shell scripts. The executable file can call supporting files, such as PowerShell, VBScript, or Python scripts.

## Actions Tab

The **Actions** tab on the **Action Governance** page lists the approved actions. Actions that are pending approval are listed on the **Pending Approval** tab.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(187).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)

The table on the **Actions** tab has these columns:

| Column | Description |
| --- | --- |
| **Approved** | Whether the action has been approved. |
| **Enabled** | Whether the action has been enabled. |
| **Action** | The name of the action. Click the name to view the action. |
| **Publisher** | The name of the publisher. |
| **Version** | The version number. |
| **Signed** | Whether the action has been signed. |
| **Last Modified** | The date and time when the action was last updated. |
| **Last Modified By** | The person who made the update. |

Click a row to view its information in the **Action Details** area. To export the selected action, click **Export** in **Action Details**.

In SysTrack Cloud, you can also change an action from the **Actions** tab. See [Edit an Action](/documentation/docs/create-actions-1#edit-an-action).

## Pending Approval Tab

The **Pending Approval** tab on the **Action Governance** page lists all actions that are waiting for approval. A new action and an imported action are not approved and not enabled until someone approves them. The number of pending actions shows in the upper-right corner of the tab name.

![](https://cdn.document360.io/87d11426-6b1f-4b19-b593-b71e55a81af3/Images/Documentation/image(188).png?sv=2026-02-06&spr=https&st=2026-11-06T17%3A15%3A02Z&se=2026-11-06T18%3A15%3A02Z&sr=c&sp=r&sig=vxtl%2FAK8uk8GJlm1kfphk2QcORFOMjZJrXpIFM%2FpJsI%3D)

The table on the **Pending Approval** tab has these columns:

| Column | Description |
| --- | --- |
| **Action** | The name of the action. Click the name to view the action. |
| **Publisher** | The name of the publisher. |
| **Version** | The version number. |
| **Signed** | Whether the action has been signed. |
| **Imported Date** | The date and time when the action was imported. |
| **Imported By** | The person who imported the action. |

On the **Pending Approval** tab, you can approve or delete actions that were imported or created with **Create Action**. See [Approve and Enable Actions](/documentation/docs/approve-actions).

> [!CAUTION]
> **WARNING**: Deleting an action also deletes every automation that uses it, and their tool schedules. You can't undo the delete. The confirmation message does not tell you this.

## Import Actions

Import an action file (`.lscmd`) when you built the action with LSActionBuilder or received it from a publisher. SysTrack stores an imported action, but systems cannot run it until someone approves it. To import, you need the **Action Governance - Import/Export** permission. See [Configure Action Governance Permissions](/documentation/docs/configure-action-governance-permissions-1).

> [!CAUTION]
> **WARNING**: If an action with the same name and publisher exists, the import replaces it. Systems stop getting the action until someone approves it again.

1. Go to **Configure** > **Tools** > **Automations and Collection Extensions** > **Action Governance** > **Actions**.
2. Click the lock icon in the upper-right corner of the page to enable editing.
3. Click **Import** and select the `.lscmd` file.
4. Check that the action is listed on the **Pending Approval** tab.

Publishers that work with Lakeside Software also distribute actions in Kits. A Kit can contain actions (`.lscmd` files), automations (`.lscmdprofile` files), role and configuration files, and sensor packs. To import the actions of a Kit, install the Kit. After you install the Kit, its actions wait for approval on the **Pending Approval** tab.

## Where SysTrack On-Premises Stores Unapproved Actions

In SysTrack On-Premises, the master stores unapproved actions in `<install directory>\Content\Commands\StagingArea\<Publisher>`. To inspect an action before you approve it, unzip its `.lscmd` file and look at the files. Do not change the files. Every action in this folder is signed, because SysTrack signs an unsigned action when you import it. A changed file breaks the hash and the signature of the action.