jamf_Group

Represents a JAMF Pro account group. Groups aggregate accounts and hold shared permissions that are inherited by their members. Groups can have Full Access or Site Access privilege levels.

Represents a Jamf Pro account group. Groups aggregate accounts and hold shared permissions that are inherited by their members. Groups can have Full Access or Site Access privilege levels.

Created by

process_group_nodes in lib/preprocess.py

Edges

The tables below list edges defined by the JamfHound extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
jamf_Contains	jamf_Tenant, jamf_Site	✅
jamf_MemberOf	jamf_Account, jamf_DisabledAccount	✅
jamf_SSO_Login	jamf_SSOIntegration	✅
jamf_Update_SSO_Settings	jamf_Account, jamf_DisabledAccount, jamf_Group, jamf_ApiClient, jamf_DisabledApiClient	✅

Outbound Edges

Edge Type	Destination Node Types	Traversable
jamf_AdminToSite	jamf_Site	✅
jamf_Create_API_Client_and_Assign_Role	jamf_Tenant	✅
jamf_Create_API_Client_and_Create_Role	jamf_Tenant	✅
jamf_Create_API_Client_and_Update_Role	jamf_Tenant	✅
jamf_CreateAccounts	jamf_Tenant	✅
jamf_CreateAPIRoles	jamf_Tenant	❌
jamf_CreateComputerExtensions	jamf_Computer	✅
jamf_CreatePolicies	jamf_Computer	✅
jamf_ScriptsNonTraversable	jamf_Tenant	❌
jamf_Update_API_Client_and_Assign_Role	jamf_Tenant	❌
jamf_Update_API_Client_and_Create_Roles	jamf_Tenant	❌
jamf_Update_API_Client_and_Update_Roles	jamf_Tenant	❌
jamf_Update_Recurring_Scripts	jamf_Computer	✅
jamf_Update_SSO_Settings	jamf_SSOIntegration, jamf_Account, jamf_DisabledAccount, jamf_Group	✅
jamf_UpdateAccounts	jamf_Tenant	✅
jamf_UpdateAPIRoles	jamf_Tenant	❌
jamf_UpdateComputerExtensions	jamf_Computer	✅
jamf_UpdatePolicies	jamf_Computer	✅

Properties

Property Name	Data Type	Description
displayname	string	Display name of the group
privilegeSet	string	Privilege set assigned (Administrator, Custom, etc.)
objectid	string	Unique identifier for the Group
name	string	Name of the group
siteID	integer	ID of the site the group is assigned to
accessLevel	string	Access level (Full Access, Site Access)
Tier	integer	Security tier classification (0 for administrator groups)
privilegesJSSObjects	string[]	JSS Object permissions granted to the group
privilegesJSSActions	string[]	JSS Action permissions granted
privilegesJSSOSettings	string[]	JSS Settings permissions granted
members	string	Serialized list of group members

Relationship Diagram

Note: Some non-traversable edges have been omitted for clarity. The diagram shows all traversable edges and structurally important non-traversable edges. Omitted edges include: jamf_Update_API_Client_and_Update_Roles, jamf_Update_API_Client_and_Create_Roles, jamf_Update_API_Client_and_Assign_Role, jamf_CreateAPIRoles, and jamf_UpdateAPIRoles.