Required Jamf Cloud Account Permissions
In order for App Portal to be successfully integrated with Jamf Cloud, your Jamf Cloud account needs to have a specific set of minimum permissions. To define permissions on your Jamf Cloud account, perform the following steps:
To set required permissions on your Jamf Cloud account:
1. | Launch Jamf Cloud and login using your Jamf Cloud account. |
2. | On the Jamf Cloud home page, click the Settings “gear” icon at the top right: |
The System Settings tab opens.
3. | Click Jamf Cloud User Accounts & Groups. The Jamf Cloud User Accounts & Groups page opens. |
4. | Click on the name of your Jamf Cloud account. The Account tab of the account settings page opens. |
Note:In some versions of Jamf Cloud, the Access Status field may be named Access Level. If so, set Access Level to Full Access.
Important:If your Jamf Cloud system account does not have Administrator privileges, then App Portal will be unable to integrate with Jamf Cloud.
5. | Open the Privileges tab. The Jamf Cloud Objects subtab of the Privileges tab opens. |
6. | On the Jamf Cloud Objects subtab, click Edit and make sure that the following permissions are selected: |
Object |
Permission |
Categories |
Create (optional) Read Update (optional) |
Computers |
Read |
File Share Distribution Points |
Read |
Packages |
Read |
Policies |
Create Read Update |
Static Computer Group |
Create Read Update |
The table below lists the minimum permissions required for the user account in Jamf Cloud to integrate with or execute different functionalities within App Portal / App Broker.
Action |
Purpose |
Permission |
Test Button |
Check existence of category, policy template, and computer group template |
READ Categories, READ Policies, READ Static Computer Groups (OPTIONAL: CREATE Categories to create category if category does not already exist) |
Data Sync |
Retrieve device information and user associations |
READ Computers |
Software Deployment |
Allow creation of software catalog items for Mac devices and automatic delivery of that software upon request |
READ Categories, READ Computers, READ File Share Distribution Points, READ Packages, CREATE/READ/UPDATE Policies, CREATE/READ/UPDATE Static Computer Groups |
7. | When you are finished selecting permissions, click Save. |
8. | Open the Jamf Cloud Settings subtab. |
9. | Click Edit and make sure that Read is selected for Activation Code. |
10. | When you are finished selecting permissions, click Save. |
See Also
Entering Jamf Cloud Settings at Initial Start Up
API Calls Used by App Portal to Integrate with Jamf Cloud
Enabling the “Create Uninstall Policy” Option for a Jamf Cloud Package