Privilege Requirements

The following table describes the minimum required privileges for a Jamf Pro user account to interact with an endpoint via the given HTTP operation. All other URIs that allow interaction with a different resource identifier (e.g. {name}, {serialnumber},{udid}, etc.) require the same privilege(s) to interact with the endpoint/operation combination defined by the {id} resource identifier.

Endpoint	Operation	Required Privilege(s)
/accounts	GET	Read - User accounts and groups
/accounts/userid/{id}	GET	Read - User accounts and groups
/accounts/userid/{id}	POST	Create - User accounts and groups
/accounts/userid/{id}	PUT	Update - User accounts and groups
/accounts/userid/{id}	DELETE	Delete - User accounts and groups
/accounts/groupid/{id}	GET	Read - User accounts and groups
/accounts/groupid/{id}	POST	Create - User accounts and groups
/accounts/groupid/{id}	PUT	Update - User accounts and groups
/accounts/groupid/{id}	DELETE	Delete - User accounts and groups
/activationcode	GET	Read - Activation code
/activationcode	PUT	Update - Activation code
/advancedcomputersearches	GET	Read - Advanced Computer Searches
/advancedcomputersearches/id/{id}	GET	Read - Advanced Computer Searches
/advancedcomputersearches/id/{id}	POST	Create - Advanced Computer Searches
/advancedcomputersearches/id/{id}	PUT	Update - Advanced Computer Searches
/advancedcomputersearches/id/{id}	DELETE	Delete - Advanced Computer Searches
/advancedmobiledevicesearches	GET	Read - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id}	GET	Read - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id}	POST	Create - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id}	PUT	Update - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id}	DELETE	Delete - Advanced Mobile Device Searches
/advancedusersearches	GET	Read - Advanced User Searches
/advancedusersearches/id/{id}	GET	Read - Advanced User Searches
/advancedusersearches/id/{id}	POST	Create - Advanced User Searches
/advancedusersearches/id/{id}	PUT	Update - Advanced User Searches
/advancedusersearches/id/{id}	DELETE	Delete - Advanced User Searches
/allowedfileextensions	GET	Read - Allowed File Extensions
/allowedfileextensions/id/{id}	GET	Read - Allowed File Extensions
/allowedfileextensions/id/{id}	POST	Create - Allowed File Extensions
/allowedfileextensions/id/{id}	DELETE	Delete - Allowed File Extensions
/buildings	GET	Read - Buildings
/buildings/id/{id}	GET	Read - Buildings
/buildings/id/{id}	POST	Create - Buildings
/buildings/id/{id}	PUT	Update - Buildings
/buildings/id/{id}	DELETE	Delete - Buildings
/byoprofiles	GET	Read - Personal Device Profiles
/byoprofiles/id/{id}	GET	Read - Personal Device Profiles
/byoprofiles/id/{id}	POST	Create - Personal Device Profiles
/byoprofiles/id/{id}	PUT	Update - Personal Device Profiles
/byoprofiles/id/{id}	DELETE	Delete - Personal Device Profiles
/categories	GET	Read - Categories
/categories/id/{id}	GET	Read - Categories
/categories/id/{id}	POST	Create - Categories
/categories/id/{id}	PUT	Update - Categories
/categories/id/{id}	DELETE	Delete - Categories
/classes	GET	Read - Classes
/classes/id/{id}	GET	Read - Classes
/classes/id/{id}	POST	Create - Classes
/classes/id/{id}	PUT	Update - Classes
/classes/id/{id}	DELETE	Delete - Classes
/commandflush	DELETE	Flush MDM Commands (Jamf Pro Server Actions)
/commandflush/{idtype}/id/{id}/status/{status}	DELETE	Flush MDM Commands (Jamf Pro Server Actions)
/computerapplications/...	GET	Read - Advanced Computer Searches
/computerapplicationusage/...	GET	Read - Computers
/computercheckin	GET	Read - Check-In
/computercheckin	PUT	Update - Check-In
/computercommands/...	GET	Read - Computers
/computercommands/...	POST	Send Computer table describ (Jamf Pro Server Actions)
/computerextensionattributes	GET	Read - Extension Attributes
/computerextensionattributes/id/{id}	GET	Read - Extension Attributes
/computerextensionattributes/id/{id}	POST	Create - Extension Attributes
/computerextensionattributes/id/{id}	PUT	Update - Extension Attributes
/computerextensionattributes/id/{id}	DELETE	Delete - Extension Attributes
/computergroups	GET	Read - Smart Computer Groups (for smart groups) Read - Static Computer Groups (for static groups)
/computergroups/id/{id}	GET	Read - Smart Computer Groups (for smart groups) Read - Static Computer Groups (for static groups)
/computergroups/id/{id}	POST	Create - Smart Computer Groups (for smart groups) Create - Static Computer Groups (for static groups)
/computergroups/id/{id}	PUT	Update - Smart Computer Groups (for smart groups) Update - Static Computer Groups (for static groups)
/computergroups/id/{id}	DELETE	Delete - Smart Computer Groups (for smart groups) Delete - Static Computer Groups (for static groups)
/computerhardwaresoftwarereports/...	GET	Read - Computers
/computerhistory/...	GET	Read - Computers
/computerinventorycollection	GET	Read - Computer Inventory Collection
/computerinventorycollection	PUT	Update - Computer Inventory Collection
/computerinvitations	GET	Read - Computer Enrollment Invitations
/computerinvitations/id/{id}	GET	Read - Computer Enrollment Invitations
/computerinvitations/id/{id}	POST	Create - Computer Enrollment Invitations
/computerinvitations/id/{id}	DELETE	Delete - Computer Enrollment Invitations
/computermanagement	GET	Read - Computers
/computers	GET	Read - Computers
/computers/id/{id}	GET	Read - Computers
/computers/id/{id}	POST	Create - Computers Create - Users
/computers/id/{id}	PUT	Update - Computers Update - Users
/computers/id/{id}	DELETE	Delete - Computers
/departments	GET	Read - Departments
/departments/id/{id}	GET	Read - Departments
/departments/id/{id}	POST	Create - Departments
/departments/id/{id}	PUT	Update - Departments
/departments/id/{id}	DELETE	Delete - Departments
/directorybindings	GET	Read - Directory Bindings
/directorybindings/id/{id}	GET	Read - Directory Bindings
/directorybindings/id/{id}	POST	Create - Directory Bindings
/directorybindings/id/{id}	PUT	Update - Directory Bindings
/directorybindings/id/{id}	DELETE	Delete - Directory Bindings
/diskencryptionconfigurations	GET	Read - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id}	GET	Read - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id}	POST	Create - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id}	PUT	Update - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id}	DELETE	Delete - Disk Encryption Configurations
/distributionpoints	GET	Read - File Share Distribution Points
/distributionpoints/id/{id}	GET	Read - File Share Distribution Points
/distributionpoints/id/{id}	POST	Create - File Share Distribution Points
/distributionpoints/id/{id}	PUT	Update - File Share Distribution Points
/distributionpoints/id/{id}	DELETE	Delete - File Share Distribution Points
/dockitems	GET	Read - Dock Items
/dockitems/id/{id}	GET	Read - Dock Items
/dockitems/id/{id}	POST	Create - Dock Items
/dockitems/id/{id}	PUT	Update - Dock Items
/dockitems/id/{id}	DELETE	Delete - Dock Items
/ebooks	GET	Read - eBooks
/ebooks/id/{id}	GET	Read - eBooks
/ebooks/id/{id}	POST	Create - eBooks
/ebooks/id/{id}	PUT	Update - eBooks
/ebooks/id/{id}	DELETE	Delete - eBooks
/fileuploads/computers/...	POST	Create - Computers
/fileuploads/mobiledevices/...	POST	Create - Mobile Devices
/fileuploads/enrollmentprofiles/...	POST	Non-functional
/fileuploads/printers/...	POST	Non-functional
/fileuploads/peripherals/...	POST	Create - Computers
/fileuploads/policies/...	POST	Create - Policies
/fileuploads/ebooks/...	POST	Create - eBooks
/fileuploads/mobiledeviceapplicationsicon/...	POST	Create - Mobile Device Apps
/fileuploads/mobiledeviceapplicationsipa/...	POST	Create - Mobile Device Apps
/fileuploads/diskencryptionconfigurations/...	POST	Create - Disk Encryption Configurations
/gsxconnection	GET	Read - GSX Connection
/gsxconnection	PUT	Update - GSX Connection
/healthcarelistener	GET	Read - Infrastructure Manager Instances
/healthcarelistener/id/{id}	GET	Read - Infrastructure Manager Instances
/healthcarelistener/id/{id}	PUT	Update - Infrastructure Manager Instances
/healthcarelistenerrule	GET	Read - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id}	GET	Read - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id}	POST	Create - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id}	PUT	Update - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id}	DELETE	Delete - Infrastructure Manager Instances
/ibeacons	GET	Read - iBeacons
/ibeacons/id/{id}	GET	Read - iBeacons
/ibeacons/id/{id}	POST	Create - iBeacons
/ibeacons/id/{id}	PUT	Update - iBeacons
/ibeacons/id/{id}	DELETE	Delete - iBeacons
/infrastructuremanager	GET	Read - Infrastructure Manager Instances
/infrastructuremanager/id/{id}	GET	Read - Infrastructure Manager Instances
/infrastructuremanager/id/{id}	PUT	Update - Infrastructure Manager Instances
/jsonwebtokenconfigurations	GET	Read - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id}	GET	Read - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id}	POST	Create - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id}	PUT	Update - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id}	DELETE	Delete - JSON Web Token Configurations
/ldapservers	GET	Read - LDAP Servers
/ldapservers/id/{id}	GET	Read - LDAP Servers
/ldapservers/id/{id}	POST	Create - LDAP Servers
/ldapservers/id/{id}	PUT	Update - LDAP Servers
/ldapservers/id/{id}	DELETE	Delete - LDAP Servers
/licensedsoftware	GET	Read - Licensed Software Records
/licensedsoftware/id/{id}	GET	Read - Licensed Software Records
/licensedsoftware/id/{id}	POST	Create - Licensed Software Records
/licensedsoftware/id/{id}	PUT	Update - Licensed Software Records
/licensedsoftware/id/{id}	DELETE	Delete - Licensed Software Records
/logflush...	DELETE	Delete - Policies Flush Policy Logs (Jamf Pro Server Actions)
/macapplications	GET	Read - Mac App Store Apps
/macapplications/id/{id}	GET	Read - Mac App Store Apps
/macapplications/id/{id}	POST	Create - Mac App Store Apps
/macapplications/id/{id}	PUT	Update - Mac App Store Apps
/macapplications/id/{id}	DELETE	Delete - Mac App Store Apps
/managedpreferenceprofiles	GET	Read - Managed Preference Profiles
/managedpreferenceprofiles/id/{id}	GET	Read - Managed Preference Profiles
/managedpreferenceprofiles/id/{id}	POST	Create - Managed Preference Profiles
/managedpreferenceprofiles/id/{id}	PUT	Update - Managed Preference Profiles
/managedpreferenceprofiles/id/{id}	DELETE	Delete - Managed Preference Profiles
/mobiledeviceapplications	GET	Read - Mobile Device Apps
/mobiledeviceapplications/id/{id}	GET	Read - Mobile Device Apps
/mobiledeviceapplications/id/{id}	POST	Create - Mobile Device Apps
/mobiledeviceapplications/id/{id}	PUT	Update - Mobile Device Apps
/mobiledeviceapplications/id/{id}	DELETE	Delete - Mobile Device Apps
/mobiledevicecommands	GET	Read - Mobile Devices
/mobiledevicecommands/...	GET	Read - Mobile Devices
/mobiledevicecommands/command...	POST	Create - Mobile Devices Send Mobile Device ed privileges (Jamf Pro Server Actions)
/mobiledeviceconfigurationprofiles	GET	Read - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id}	GET	Read - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id}	POST	Create - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id}	PUT	Update - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id}	DELETE	Delete - Mobile Device Configuration Profiles
/mobiledeviceenrollmentprofiles	GET	Read - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id}	GET	Read - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id}	POST	Create - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id}	PUT	Update - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id}	DELETE	Delete - Enrollment Profiles
/mobiledeviceextensionattributes	GET	Read - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id}	GET	Read - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id}	POST	Create - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id}	PUT	Update - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id}	DELETE	Delete - Mobile Device Extension Attributes
/mobiledevicegroups	GET	Read - Smart Mobile Device Groups (for smart groups) Read - Static Mobile Device Groups (for static groups)
/mobiledevicegroups/id/{id}	GET	Read - Smart Mobile Device Groups (for smart groups) Read - Static Mobile Device Groups (for static groups)
/mobiledevicegroups/id/{id}	POST	Create - Smart Mobile Device Groups (for smart groups) Create - Static Mobile Device Groups (for static groups
/mobiledevicegroups/id/{id}	PUT	Update - Smart Mobile Device Groups (for smart groups) Update - Static Mobile Device Groups (for static groups)
/mobiledevicegroups/id/{id}	DELETE	Delete - Smart Mobile Device Groups (for smart groups) Delete - Static Mobile Device Groups (for static groups)
/mobiledevicehistory/...	GET	Read - Mobile Devices
/mobiledeviceinvitations	GET	Read - Mobile Device Enrollment Invitations
/mobiledeviceinvitations/id/{id}	GET	Read - Mobile Device Enrollment Invitations
/mobiledeviceinvitations/id/{id}	POST	Create - Mobile Device Enrollment Invitations
/mobiledeviceinvitations/id/{id}	DELETE	Delete - Mobile Device Enrollment Invitations
/mobiledeviceprovisioningprofiles	GET	Read - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id}	GET	Read - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id}	POST	Create - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id}	PUT	Update - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id}	DELETE	Delete - Provisioning Profiles
/mobiledevices	GET	Read - Mobile Devices
/mobiledevices/id/{id}	GET	Read - Mobile Devices
/mobiledevices/id/{id}	POST	Create - Mobile Devices Create - Users
/mobiledevices/id/{id}	PUT	Update - Mobile Devices Update - Users
/mobiledevices/id/{id}	DELETE	Delete - Mobile Devices
/networksegments	GET	Read - Network Segments
/networksegments/id/{id}	GET	Read - Network Segments
/networksegments/id/{id}	POST	Create - Network Segments
/networksegments/id/{id}	PUT	Update - Network Segments
/networksegments/id/{id}	DELETE	Delete - Network Segments
/osxconfigurationprofiles	GET	Read - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id}	GET	Read - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id}	POST	Create - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id}	PUT	Update - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id}	DELETE	Delete - macOS Configuration Profiles
/packages	GET	Read - Packages
/packages/id/{id}	GET	Read - Packages
/packages/id/{id}	POST	Create - Packages
/packages/id/{id}	PUT	Update - Packages
/packages/id/{id}	DELETE	Delete - Packages
/patchavailabletitles/sourceid/{id}	GET	Read - Patch Management Software Titles
/patchexternalsources	GET	Read - External Patch Sources
/patchexternalsources/id/{id}	GET	Read - External Patch Sources
/patchexternalsources/id/{id}	POST	Create - External Patch Sources
/patchexternalsources/id/{id}	PUT	Update - External Patch Sources
/patchexternalsources/id/{id}	DELETE	Delete - External Patch Sources
/patchinternalsources...	GET	Read - Internal Patch Sources (Jamf Pro Server Settings)
/patchpolicies	GET	Read - Patch Management Software Titles Read - Patch Policies
/patchpolicies/id/{id}	GET	Read - Patch Management Software Titles Read - Patch Policies
/patchpolicies/id/{id}	POST	Create - Patch Policies
/patchpolicies/id/{id}	PUT	Update - Patch Policies
/patchpolicies/id/{id}	DELETE	Delete - Patch Policies
/patchreports...	GET	Read - Patch Management Software Titles
/patchsoftwaretitles	GET	Read - Patch Management Software Titles
/patchsoftwaretitles/id/{id}	GET	Read - Patch Management Software Titles
/patchsoftwaretitles/id/{id}	POST	Create - Patch Management Software Titles
/patchsoftwaretitles/id/{id}	PUT	Update - Patch Management Software Titles
/patchsoftwaretitles/id/{id}	DELETE	Delete - Patch Management Software Titles Delete - Extension Attributes (if the patch title includes an Extension Attribute)
/peripherals	GET	Read - Computers
/peripherals/id/{id}	GET	Read - Computers
/peripherals/id/{id}	POST	Create - Computers
/peripherals/id/{id}	PUT	Update - Computers
/peripherals/id/{id}	DELETE	Delete - Computers
/peripheraltypes	GET	Read - Peripheral Types
/peripheraltypes/id/{id}	GET	Read - Peripheral Types
/peripheraltypes/id/{id}	POST	Create - Peripheral Types
/peripheraltypes/id/{id}	PUT	Update - Peripheral Types
/peripheraltypes/id/{id}	DELETE	Delete - Peripheral Types
/policies...	GET	Read - Policies
/policies/id/{id}	GET	Read - Policies
/policies/id/{id}	POST	Create - Policies
/policies/id/{id}	PUT	Update - Policies
/policies/id/{id}	DELETE	Delete - Policies
/printers	GET	Read - Printers
/printers/id/{id}	GET	Read - Printers
/printers/id/{id}	POST	Create - Printers
/printers/id/{id}	PUT	Update - Printers
/printers/id/{id}	DELETE	Delete - Printers
/removablemacaddresses	GET	Read - Removable MAC Addresses
/removablemacaddresses/id/{id}	GET	Read - Removable MAC Addresses
/removablemacaddresses/id/{id}	POST	Create - Removable MAC Addresses
/removablemacaddresses/id/{id}	PUT	Update - Removable MAC Addresses
/removablemacaddresses/id/{id}	DELETE	Delete - Removable MAC Addresses
/restrictedsoftware	GET	Read - Restricted Software Records
/restrictedsoftware/id/{id}	GET	Read - Restricted Software Records
/restrictedsoftware/id/{id}	POST	Create - Restricted Software Records
/restrictedsoftware/id/{id}	PUT	Update - Restricted Software Records
/restrictedsoftware/id/{id}	DELETE	Delete - Restricted Software Records
/scripts	GET	Read - Scripts
/scripts/id/{id}	GET	Read - Scripts
/scripts/id/{id}	POST	Create - Scripts
/scripts/id/{id}	PUT	Update - Scripts
/scripts/id/{id}	DELETE	Delete - Scripts
/sites	GET	Read - Sites
/sites/id/{id}	GET	Read - Sites
/sites/id/{id}	POST	Create - Sites
/sites/id/{id}	PUT	Update - Sites
/sites/id/{id}	DELETE	Delete - Sites
/smtpserver	GET	Read - SMTP Server (Jamf Pro Server Settings)
/smtpserver	PUT	Update - SMTP Server (Jamf Pro Server Settings)
/softwareupdateservers	GET	Read - Software Update Servers
/softwareupdateservers/id/{id}	GET	Read - Software Update Servers
/softwareupdateservers/id/{id}	POST	Create - Software Update Servers
/softwareupdateservers/id/{id}	PUT	Update - Software Update Servers
/softwareupdateservers/id/{id}	DELETE	Delete - Software Update Servers
/userextensionattributes	GET	Read - User Extension Attributes
/userextensionattributes/id/{id}	GET	Read - User Extension Attributes
/userextensionattributes/id/{id}	POST	Create - User Extension Attributes
/userextensionattributes/id/{id}	PUT	Update - User Extension Attributes
/userextensionattributes/id/{id}	DELETE	Delete - User Extension Attributes
/usergroups	GET	Read - Smart User Groups OR Static User Groups
/usergroups/id/{id}	GET	Read - Smart User Groups (for smart groups) Read - Static User Groups (for static groups)
/usergroups/id/{id}	POST	Create - Smart User Groups (for smart groups) Create - Static User Groups (for static groups)
/usergroups/id/{id}	PUT	Update - Smart User Groups (for smart groups) Update - Static User Groups (for static groups)
/usergroups/id/{id}	DELETE	Delete - Smart User Groups (for smart groups) Delete - Static User Groups (for static groups)
/users	GET	Read - Users
/users/id/{id}	GET	Read - Users
/users/id/{id}	POST	Create - Users
/users/id/{id}	PUT	Update - Users
/users/id/{id}	DELETE	Delete - Users
/vppaccounts	GET	Read - VPP Admin Accounts
/vppaccounts/id/{id}	GET	Read - VPP Admin Accounts
/vppaccounts/id/{id}	POST	Create - VPP Admin Accounts
/vppaccounts/id/{id}	PUT	Update - VPP Admin Accounts
/vppaccounts/id/{id}	DELETE	Delete - VPP Admin Accounts
/vppassignments	GET	Read - VPP Assignments
/vppassignments/id/{id}	GET	Read - VPP Assignments
/vppassignments/id/{id}	POST	Create - VPP Assignments
/vppassignments/id/{id}	PUT	Update - VPP Assignments
/vppassignments/id/{id}	DELETE	Delete - VPP Assignments
/vppinvitations	GET	Read - VPP Invitations
/vppinvitations/id/{id}	GET	Read - VPP Invitations
/vppinvitations/id/{id}	POST	Create - VPP Invitations
/vppinvitations/id/{id}	PUT	Update - VPP Invitations
/vppinvitations/id/{id}	DELETE	Delete - VPP Invitations
/webhooks	GET	Read - Webhooks
/webhooks/id/{id}	GET	Read - Webhooks
/webhooks/id/{id}	POST	Create - Webhooks
/webhooks/id/{id}	PUT	Update - Webhooks
/webhooks/id/{id}	DELETE	Delete - Webhooks