> ## Documentation Index
> Fetch the complete documentation index at: https://specterops-fetch-json-component.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Privilege Zone Rules

> Default Privilege Zone rules for the JamfHound extension

<img noZoom src="https://mintcdn.com/specterops-fetch-json-component/pkiaFEhjWYPnhxMb/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=pkiaFEhjWYPnhxMb&q=85&s=c83d7e4a67c741a979c0e77bf15c1252" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

The following Cypher rules define the default Privilege Zone for the JamfHound extension.
Each rule is defined in a JSON file located in the [PrivilegeZoneRules](https://github.com/SpecterOps/JAMFHound_Internal/tree/main/Src/PrivilegeZoneRules) directory of the JamfHound repository.

## Tenant

Tenant nodes in JAMF Pro.

```cypher theme={null}
MATCH (n:jamf_Tenant)
RETURN n
```

This rule is defined in the [tenant.json](https://github.com/SpecterOps/JAMFHound_Internal/tree/main/Src/PrivilegeZoneRules/tenant.json) file.

## Tier Zero Principals

Accounts and group principals with 'Full Access' administrator privileges in the tenant and 'SSO' configuration if enabled.

```cypher theme={null}
MATCH (n)
WHERE n.Tier = 0
RETURN n
```

This rule is defined in the [tier0-principals.json](https://github.com/SpecterOps/JAMFHound_Internal/tree/main/Src/PrivilegeZoneRules/tier0-principals.json) file.

## Tier One Principals

Other devices and principals without granted tenant administrator permissions.

```cypher theme={null}
MATCH (n)
WHERE n.Tier = 1
RETURN n
```

This rule is defined in the [tier1-principals.json](https://github.com/SpecterOps/JAMFHound_Internal/tree/main/Src/PrivilegeZoneRules/tier1-principals.json) file.