$ ./mactechbuds.sh
Starting MacTechBuds...
Blog engine loaded ✓
AI tools ready ✓
Bash scripts active ✓
Timer system ready ✓
Theme engine active ✓
Dev tools online ✓
mactechbuds.com >
Back to Tech Thoughts

Jamf Pro Administration Guide

Overview

Jamf Pro is the leading Apple Device Management platform used by enterprise IT teams worldwide. This guide covers essential administration tasks, API usage, and best practices for managing Mac fleets at scale.

Core Concepts

Smart Groups

Dynamic device groups built on criteria like OS version, enrolled department, installed apps, or custom extension attribute values. Smart Groups power scoping for policies, profiles, and restricted software.

Policies

Executables triggered by check-in, login, logout, or self-service. Used to run scripts, install packages, update inventory, and flush MDM commands. Always set a Frequency to avoid unintended re-runs.

Extension Attributes

Custom data points collected via scripts at check-in. Examples: last backup date, installed browser extensions, VPN client version, or SIP status. Used in Smart Group criteria and inventory reports.

Jamf Pro API

RESTful API (v1) and Classic API (XML-based) for automation. Common use cases include bulk device updates, exporting inventory, triggering remote commands, and integrating with n8n or custom scripts.

bash
# Get Jamf Pro API token
curl -su "user:password" \
  "https://yourinstance.jamfcloud.com/api/v1/auth/token" \
  -X POST | python3 -m json.tool

Self Service

The Jamf Self Service app surfaces approved software, scripts, and actions to end users — reducing helpdesk tickets for common requests like password resets, printer installs, and VPN setup.

Jamf Pro scripts and extension attributes are available in the Apple_Mac repository.