---
title: "Automation and orchestration"
slug: "automation-and-orchestration-v6-7"
description: "AppGate ZTNA enables scriptable access control, automating interactions with external systems while securely managing credentials and configurations."
updated: 2026-08-21T14:47:28Z
published: 2026-08-21T14:47:28Z
canonical: "support.appgate.com/automation-and-orchestration-v6-7"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Automation and orchestration

The AppGate ZTNA system allows the access control process flow to be scriptable. This allows the system to inter-operate with countless external systems and network environments. The system can learn who needs what access rights, which Actions are allowed when, and then the system finds available live hosts.

The diagram below illustrates every point in the access control model where it is possible to introduce an element of automation and orchestration.

![Flowchart illustrating device sign-in, token passing, and access criteria processes.](https://cdn.us.document360.io/e7482ce5-acfa-4c3b-b76c-b6c32472644a/Images/Documentation/auto_orch-appgate.png?sv=2026-02-06&spr=https&st=2026-10-26T23%3A26%3A06Z&se=2026-10-27T00%3A26%3A06Z&sr=c&sp=r&sig=cLb1GbHt5DO97J1mWSaVLhBat%2FsjkNOQq4y5PciS3GE%3D)

Scripts can be used throughout AppGate ZTNA and perform complex logic, string manipulations, and calculations. An important part of this capability is to allow limited [https calls](/v1/docs/advanced-external-https-calls-v6-7) to be made to external systems. For these calls, there is a [Secrets](/v1/docs/secrets-v6-7) store built into AppGate ZTNA so that any credentials required to authenticate to these external systems are not exposed in the scripts or related logs.

It is also possible for scripts run by external systems to make calls to AppGate ZTNA to modify the system configuration. To achieve this, AppGate ZTNA provides a complete set of API functions. These can create entitlements, policies, and conditions, and also deploy appliances. This makes it very easy to have external systems update the configuration settings within the system. For more information refer to [REST API](/v1/docs/rest-api-v6-7).

For more information, see the [Use of Scripts](/v1/docs/use-of-scripts-v6-7) section. Our Professional Services team is also available to provide advice at [Help & Support](/v1/docs/help-and-support-v6-7)