Automation actions are the steps in a pipeline where work gets done! Some actions are pre-built, and others (like scripts) allow for total customization and flexibility. Some actions do work on devices, and others help you do work inside the Level app itself.

Once an action type is selected, any parameters specific to that action (if any) will be revealed. Every action has a required "condition" parameter, as well as additional optional parameters.

This action will restart the targeted devices.

This action will run a script from your Level script library.

Please note that unless the script exits in a failure state, the default behavior is for the pipeline to continue to run (even if the script itself fails). Therefore, controlling the exit type will play an important role in flow control of the automation. In PowerShell, Bash, and others use "exit 1" to exit the script in an error state.

See the On Action Failure section below for more details on how an action handles a failure.

This action is similar to a script, however the script commands can be entered into the action itself. The script commands will not be saved to the script library, and will only exist in the automation. This is useful if the commands required are simple and code reuse is not a concern.

The Start Process action allows you to launch an executable on an endpoint. Provide the full path to the executable, optional arguments, and a timeout period. This action is ideal for launching scripts, installing applications, or running maintenance tasks as part of an automation workflow.

The Stop Process action terminates a running process on an endpoint. Simply specify the process name, and Level will attempt to stop it. This is useful for force-closing unresponsive applications, stopping unauthorized software, or managing system resources efficiently.
​

The Manage Service action allows you to control system services on an endpoint. You can specify a service name, set its startup type, and define its current state (start, stop, or restart). This is useful for ensuring critical services are running, restarting problematic ones, or disabling unnecessary services as part of an automation workflow.

This action will stop all devices in the automation pipeline until a Level technician approves the device to move along in the pipeline.

When a device is pending approval, it will show in the active device status pane on the left, and an icon representing the device will appear next to the Wait For Approval step in the pipeline.

This action will insert a timed delay step in the pipeline. The duration is in seconds.

The Download File action allows you to push files stored in Level’s built-in Automation File Storage directly to endpoints. Simply select the file, define the destination path, and specify the file name—Level handles the rest. This action ensures secure and seamless file distribution without requiring an external hosting service.

This action supports Level Variables for dynamic file paths and names, making them flexible for various deployment scenarios.

The Download File via URL lets you retrieve files from an external source by providing a direct URL. This is useful for dynamically pulling files from a web server or cloud storage. Just enter the file URL, set the destination path, and assign a file name. Level will download and store the file on the endpoint.

This action supports Level Variables for dynamic file paths and names, making them flexible for various deployment scenarios.

Level actions do not actually do anything or run any code on the devices. Instead they run actions in the Level app that pertain to organization and management of devices.

This action allows you to set a custom field using a variable from an automation.

This action creates an alert in Level, allowing users to define a title, description, severity, and custom payload. It also enables email notifications for specified recipients when the alert is triggered.

This action step will apply a Level tag to a device.

This action step will remove a Level tag from a device.

This action step will move an agent into the group selected.
​

This action step will put the device into maintenance mode in Level. When a device is in maintenance mode, the device will not trigger alerts from monitor policies. This is a useful action if the other steps in the pipeline are likely to cause the agent to trigger monitor policies.

This action step will disable maintenance mode on a device.

This action initiates the installation of Windows updates on the target devices. You can configure it to include specific types of updates such as critical updates, security updates, and definition updates (see Windows Patch Management Categories).

Key Parameters:

This action applies available macOS updates to the target devices. The updates can include macOS system updates and App Store updates.

Key Parameters:

This action installs updates on Linux devices, including updates to the kernel, security-related patches, and general system updates.

Key Parameters:

This action will trigger Windows Defender to update its security signatures/definitions. The "Add Level to Windows Defender as an exclusion" option adds Level to Defender's file exclusion list.

This action will start a full system scan with Windows Defender. The "Add Level to Windows Defender as an exclusion" option adds Level to Defender's file exclusion list.
​

This action installs the Winget package manager on Windows devices. Winget is developed and maintained by Microsoft and provides a centralized way to manage and automate the installation of applications on Windows endpoints.

Key Parameters:

This action installs one or more applications from the Winget repository onto the targeted Windows devices. With over 4,000 applications available (e.g., Chrome, Firefox, Zoom, Teams), Winget simplifies software deployment.

Key Parameters:

This action upgrades applications installed on the target devices using the Winget repository. It can upgrade all applications available via Winget, even if they were not originally installed using Winget.

Key Parameters:

This action removes one or more applications from the targeted Windows devices using Winget.

Key Parameters:

The Install Microsoft 365 for Windows action simplifies the deployment of Microsoft 365 across your managed devices. This action allows technicians to quickly install the Office suite, ensuring users have access to productivity tools like Word, Excel, PowerPoint, and Teams.

Key Parameters:

The Install Microsoft 365 for Mac action enables IT admins to seamlessly deploy Microsoft 365 on macOS devices. This action ensures users have access to critical Microsoft Office applications such as Word, Excel, PowerPoint, and Outlook, tailored for macOS.

Key Parameters:

This action will prompt the end user of the device to approve or reject this step of the pipeline. The question field is where the desired text to be sent to the end user should go. The Prompt Frequency controls when a reprompt should appear in the event that the delay button is pressed.

The Force Compliance checkbox means that the delay button will no longer be an option after the max attempt value has been reached. After that, the only option the device end user will have is an accept button.

The notification only pushes to a user session logged in to the console. This means it will not work for other sessions including those using Microsoft Remote Desktop Protocol.

This action will send a toast notification to the device end user. The notification has no impact on the pipeline flow and only serves to send a notice to the end user of the device.

The notification only pushes to a user session logged in to the console. This means it will not work for other sessions including those using Microsoft Remote Desktop Protocol.