The TOS CLI - command line interface - is a set of commands that can be run from the Linux command line. The command sudo tos help will list all CLI commands. All TOS commands require root privileges to run, therefore on TufinOS, they must be run using sudo as user root is not available on the TufinOS operating system.
Commands that retrieve information can be run on any node; commands that make changes can only be run on the primary data node, unless specified otherwise.