The Orchestrator API provides a scripting class, Command, that runs commands in the Orchestrator server host operating system. To prevent unauthorized access to the Orchestrator server host, by default, Orchestrator applications do not have permission to run the Command class.

The Orchestrator administrator can allow access to the Command scripting class by setting the com.vmware.js.allow-local-process=true system property.