Accessing and Configuring Jamf Pro

The Office of Information Technology (OIT) manages two Jamf Pro environments. These can be accessed using a web browser without network restriction. 

• When Accessing the Non-HCC Production Jamf Pro Environment
  • Use your full email ([email protected]) for authentication. Access to this environment is a role-based, least privileged structure. You will only see computers/devices you are authorized for.
  • Access to the Non HCC Environments can be requested through the Jamf Pro Access Request Forum.
• When Accessing the HCC Production Jamf Pro Environment
  • Use your full email ([email protected]) for authentication. Access to this environment is a role-based, least privileged structure. You will only see computers/devices you are authorized for.
  • The HCC Jamf environment uses a zero access at rest model. You will need to activate a Read or Modify role through the EntraID Access Packages.
    • Instructions for using Entra ID Roles are available in the KB Microsoft My Access: Using EntraID Roles Access Packages for Privileged Identity Management
  • Access to a EntraID Role is managed through Grouper using automatons based on department ID and job code.

This article focuses on the web interface using images from the non-HCC production environment. Using the Self Service application on macOS Computers is available for reference when performing administrative IT tasks from an end user device. While a RESTful API is available in Jamf Pro, access through this is strictly limited to SME-Apple-Systems staff.

Logging In

1. Visit the URL for the environment you need to access from descriptions above. 
2. You will be taken to the Microsoft login prompt. 
3. After which users will then follow Duo authentication prompts. 
4. After successfully logging in you will be taken to your Dashboard.

Dashboards 

Each time you log into Jamf Pro, the Dashboard is displayed. At first the Dashboard will be empty, but you can customize it to display specific information, like Smart Group membership, Policy logs, and Patch Management statistics. These items will then appear each time you log in.

Any object that can be added to a Dashboard will include a "Show in Jamf Pro Dashboard" check box.

Items appear in the Dashboard as small "widgets," which are unique to each user based on their individual selections.

Site Context

Jamf Pro uses "Sites" as a primary grouping structure. The Site menu is located in the top right corner and will display the Site level you are currently working in. By clicking on the Site here you will be presented with an alphabetical list of the Sites available to your role. Objects not added to a specific Site can be deployed to all managed devices and appear when viewing Full Jamf Pro. Objects added to a specific Site can only be deployed to managed devices also enrolled into that Site.

Configuring Your Account Preferences

Account Preferences and Inventory Display settings are unique to each user. Be sure to check these settings, as the default behavior may not be what you expect when navigating Jamf Pro.

The Language and Region setting will affect how Jamf displays information to you.

1. Click the User icon in the top right toolbar and select Account Preferences from the pulldown menu.

2. The OIT Jamf server is a cloud-hosted service, this results in the default time zone reflecting the hosting region of the environment. To change this, select the Language & Region section from Account Settings.

The Search Preferences settings will affect how Jamf interprets your search terms when looking up Computers or Devices.

1. Click the User icon in the top right toolbar and select Account Preferences from the pulldown menu.
   
2. From the Search Preferences section, drop down boxes will allow you to widen the search from Exact Match to Starts With or Contains.
   

The Inventory Display setting will affect what criteria is checked when searching for Devices and the columns displayed in your search results. 

1. Click Settings in the left sidebar.

2. Enter Inventory Display in the search field (partial entry of the term will also work).

3. Click Inventory Display button
4. Of the options displayed only Device Name is checked (as the default).
   • Be sure to select Serial Number, found in the Hardware section. Serial Number is the primary identifier used by OIT for identifying devices.
   • Select additional default search criteria as needed.
   • Note: to adjust settings for mobile devices, repeat the process in the Device Management > Inventory Display menu to adjust settings.

Finding Computers and Mobile Devices

You can find computers or mobile devices (such as iPhones, iPads and also AppleTVs) by using the Search Inventory feature in the device type from the menu on the left.

1. Click Search Inventory from the Computers menu options.

2. Enter your search criteria (such as Serial Number or Name) into the search field.
   • Be sure Computers (the default) is set for the pulldown menu to the right of the search field.

3. Click Search.
4. The results are displayed as a list including any columns of information you selected in your Inventory Display settings.  
   • To show ALL devices in your current Site Context, leave the search field blank.
   • Many roles will have the ability to create Advanced Searches using the + New button. The Jamf article Advanced Searches in Jamf Pro provides details on this feature.