Actions281
- Accounts Actions
- Account Policy
- Update Account Policy
- GenerateRegenerate Uninstall Password
- Get Uninstall Password Metadata
- Revoke Uninstall Password
- Get Uninstall Password
- Get Account by ID
- Update Account
- Expire an Account
- Reactivate Account
- Revert Policy
- Get Accounts
- Create Account
- Get accounts private
- Available Name
- Get Accounts for Navigation
- Get One Account
- Policy Actions
- UninstallPassword Actions
- Activities Actions
- Agents Actions
- Abort Scan
- Approve Uninstall
- Broadcast Message
- Can run Remote Shell
- Clear Remote Shell
- Connect to Network
- Decommission
- Disable Agent
- Disconnect from Network
- Enable Agent
- Fetch Firewall Rules
- Get Installed Apps for agent
- Initiate Scan
- Mark as uptodate
- Move to Console
- Move between Sites
- Randomize UUID
- Disable Ranger
- Enable Ranger
- Reject uninstall
- Reset Local Config
- Set Persistent Configuration Overrides
- Set External ID
- Shutdown
- Start Remote Profiling
- Start Remote Shell
- Stop Remote Profiling
- Uninstall
- Update Software
- Fetch Files
- Export Agent Logs
- Get Agents
- Get Application
- Count Agents
- Get Passphrase
- Processes
- DEPRECATED Get Agent Available Actions
- Get Agent Available Actions
- Event Throttling
- Flush Event Queue
- Protect
- Purge Crash Dumps
- Purge DB
- Purge Research Data
- Reload
- Restart
- Revoke Token
- Send Crash Dumps
- Send Research Data
- Unprotect
- Randomize DV Host
- Auto Complete
- Count by Filters
- FreeText Filters
- Count Summary
- Get config
- Actions Actions
- Abort Scan
- Approve Uninstall
- Broadcast Message
- Can run Remote Shell
- Clear Remote Shell
- Connect to Network
- Decommission
- Disable Agent
- Disconnect from Network
- Enable Agent
- Fetch Firewall Rules
- Get Installed Apps for agent
- Fetch Logs
- Fetch Firewall Logs
- Initiate Scan
- Mark as uptodate
- Move to Console
- Move between Sites
- Randomize UUID
- Disable Ranger
- Enable Ranger
- Reject uninstall
- Reset Local Config
- Restart
- Set Persistent Configuration Overrides
- Set External ID
- Shutdown
- Settings Actions
- Tasks Actions
- Threats Actions
- Get Enriched Events
- Count Events by Type
- Get Process Event
- Prefetch events
- Get Timeline Limits
- Get Tree
- Threat Analysis
- Threat Appearances
- Connect Agents
- Disconnect Agents
- Get Threat Available Actions
- Create Slim Threat
- Add to Blacklist Deep Visibility
- Mark as Threat Deep Visibility
- Auto Complete
- Count by Filters
- FreeText Filters
- Create Deep Visibility Threat
- Multiple actions for Threats
- Threat Summary
- Get Timeline Categories
- Update Threat Note
- Delete Threat Note
- Get Threat Notes
- Download from cloud
- Get Events
- Get Threat Timeline
- Exclusion Options
- Get Threats
- Add to Blacklist
- Add to Exclusions
- Update Threat Analyst Verdict
- Disable Engines
- Export Threats
- Update Threat External Ticket ID
- Fetch Threat File
- Updated Threat Incident
- Mitigate Threats
- Export Mitigation Report
- Add Note to Multiple
- Explore Actions
- Users Actions
- iFrame Token Details
- Login by iFrame Token
- Get Token
- Revoke iFrame Token
- Disable 2FA
- Enable 2FA
- Auth App
- Sign EULA
- Auth Recovery Code
- Redirect to SSO
- Auth by SSO
- Login
- Login by API Token
- Login by Token
- Send Verification Email
- Validate Verification Token
- Email Verification
- Get User
- Update User
- Delete User
- API Token by User ID
- List users
- Create User
- API Token Details
- Change Password
- Bulk Delete Users
- Enable 2FA App
- Generate API Token
- Generate iFrame Token
- Generate Recovery Code
- Check Global User
- Details Actions
- DeviceReview Actions
- Rbac Actions
- Role Actions
- RemoteScripts Actions
- ReportTasks Actions
- Reports Actions
- ActiveDirectory Actions
- Microsoft Actions
- Notifications Actions
- Recipients Actions
- Sms Actions
- Smtp Actions
- Sso Actions
- Notes Actions
- Download Actions
- Packages Actions
- Update Actions
- Upload Actions
- Software Actions
- 2fa Actions
- Auth Actions
- Login Actions
- SsoSaml2 Actions
- Onboarding Actions
- ApplicationInventory Actions
- ApplicationInventoryCounts Actions
- LastActivityAsSyslog Actions
- Sentinelonerss Actions
- SiteWithAdmin Actions
- Tests Actions
- User Actions
Actions → Reject uninstall
AI-generatedOverview
This node performs the 'Reject uninstall' action on SentinelOne Agents via the SentinelOne Management Console API. It is used to reject uninstall requests for all Agents that match specified filters, preventing unauthorized or accidental uninstalls of the SentinelOne Agent on endpoints. This is particularly useful in scenarios where security policies require strict control over agent uninstallation to maintain endpoint protection.
Use Case Examples
- Reject uninstall requests for all Agents in a specific group or site to ensure continuous endpoint protection.
- Automatically reject uninstall requests during a security incident to prevent disabling of protection agents.
Properties
| Name | Meaning |
|---|---|
| Options | Additional options to customize the API request, including custom request body, headers, query filters, batching settings, debug mode, pagination, and timeout. |
Output
JSON
json- API response data or debug information if debug mode is enabled
Dependencies
- An API key credential for SentinelOne Management Console API
Troubleshooting
- Ensure the API credentials are correctly configured and have sufficient permissions to perform the reject uninstall action.
- Check network connectivity to the SentinelOne Management Console API endpoint.
- If the node returns permission errors, verify the user role and scope permissions in SentinelOne.
- Use the debug option to inspect the actual API request and response for troubleshooting.
Links
- SentinelOne API Documentation - Reject Uninstall - Official API documentation for the reject uninstall action on agents.