GuidesRecipesAPI ReferenceChangelogDiscussions
Log In
Guides

Privilege Requirements

Discover what Jamf Pro user account privileges are required to interact with Classic API endpoints. More information on User Accounts and Groups can be found here.

The following table describes the minimum required privileges for a Jamf Pro user account to interact with an endpoint via the given HTTP operation. All other URIs that allow interaction with a different resource identifier (e.g. {name}, {serialnumber},{udid}, etc.) require the same privilege(s) to interact with the endpoint/operation combination defined by the {id} resource identifier.

Endpoint

Operation

Required Privilege(s)

/accounts

GET

Read - User accounts and groups

/accounts/userid/{id}

GET

Read - User accounts and groups

/accounts/userid/{id}

POST

Create - User accounts and groups

/accounts/userid/{id}

PUT

Update - User accounts and groups

/accounts/userid/{id}

DELETE

Delete - User accounts and groups

/accounts/groupid/{id}

GET

Read - User accounts and groups

/accounts/groupid/{id}

POST

Create - User accounts and groups

/accounts/groupid/{id}

PUT

Update - User accounts and groups

/accounts/groupid/{id}

DELETE

Delete - User accounts and groups

/activationcode

GET

Read - Activation code

/activationcode

PUT

Update - Activation code

/advancedcomputersearches

GET

Read - Advanced Computer Searches

/advancedcomputersearches/id/{id}

GET

Read - Advanced Computer Searches

/advancedcomputersearches/id/{id}

POST

Create - Advanced Computer Searches

/advancedcomputersearches/id/{id}

PUT

Update - Advanced Computer Searches

/advancedcomputersearches/id/{id}

DELETE

Delete - Advanced Computer Searches

/advancedmobiledevicesearches

GET

Read - Advanced Mobile Device Searches

/advancedmobiledevicesearches/id/{id}

GET

Read - Advanced Mobile Device Searches

/advancedmobiledevicesearches/id/{id}

POST

Create - Advanced Mobile Device Searches

/advancedmobiledevicesearches/id/{id}

PUT

Update - Advanced Mobile Device Searches

/advancedmobiledevicesearches/id/{id}

DELETE

Delete - Advanced Mobile Device Searches

/advancedusersearches

GET

Read - Advanced User Searches

/advancedusersearches/id/{id}

GET

Read - Advanced User Searches

/advancedusersearches/id/{id}

POST

Create - Advanced User Searches

/advancedusersearches/id/{id}

PUT

Update - Advanced User Searches

/advancedusersearches/id/{id}

DELETE

Delete - Advanced User Searches

/allowedfileextensions

GET

Read - Allowed File Extensions

/allowedfileextensions/id/{id}

GET

Read - Allowed File Extensions

/allowedfileextensions/id/{id}

POST

Create - Allowed File Extensions

/allowedfileextensions/id/{id}

DELETE

Delete - Allowed File Extensions

/buildings

GET

Read - Buildings

/buildings/id/{id}

GET

Read - Buildings

/buildings/id/{id}

POST

Create - Buildings

/buildings/id/{id}

PUT

Update - Buildings

/buildings/id/{id}

DELETE

Delete - Buildings

/byoprofiles

GET

Read - Personal Device Profiles

/byoprofiles/id/{id}

GET

Read - Personal Device Profiles

/byoprofiles/id/{id}

POST

Create - Personal Device Profiles

/byoprofiles/id/{id}

PUT

Update - Personal Device Profiles

/byoprofiles/id/{id}

DELETE

Delete - Personal Device Profiles

/categories

GET

Read - Categories

/categories/id/{id}

GET

Read - Categories

/categories/id/{id}

POST

Create - Categories

/categories/id/{id}

PUT

Update - Categories

/categories/id/{id}

DELETE

Delete - Categories

/classes

GET

Read - Classes

/classes/id/{id}

GET

Read - Classes

/classes/id/{id}

POST

Create - Classes

/classes/id/{id}

PUT

Update - Classes

/classes/id/{id}

DELETE

Delete - Classes

/commandflush

DELETE

Flush MDM Commands (Jamf Pro Server Actions)

/commandflush/{idtype}/id/{id}/status/{status}

DELETE

Flush MDM Commands (Jamf Pro Server Actions)

/computerapplications/...

GET

Read - Advanced Computer Searches

/computerapplicationusage/...

GET

Read - Computers

/computercheckin

GET

Read - Check-In

/computercheckin

PUT

Update - Check-In

/computercommands/...

GET

Read - Computers

/computercommands/...

POST

Send Computer table describ (Jamf Pro Server Actions)

/computerextensionattributes

GET

Read - Extension Attributes

/computerextensionattributes/id/{id}

GET

Read - Extension Attributes

/computerextensionattributes/id/{id}

POST

Create - Extension Attributes

/computerextensionattributes/id/{id}

PUT

Update - Extension Attributes

/computerextensionattributes/id/{id}

DELETE

Delete - Extension Attributes

/computergroups

GET

Read - Smart Computer Groups (for smart groups)

Read - Static Computer Groups (for static groups)

/computergroups/id/{id}

GET

Read - Smart Computer Groups (for smart groups)

Read - Static Computer Groups (for static groups)

/computergroups/id/{id}

POST

Create - Smart Computer Groups (for smart groups)

Create - Static Computer Groups (for static groups)

/computergroups/id/{id}

PUT

Update - Smart Computer Groups (for smart groups)

Update - Static Computer Groups (for static groups)

/computergroups/id/{id}

DELETE

Delete - Smart Computer Groups (for smart groups)

Delete - Static Computer Groups (for static groups)

/computerhardwaresoftwarereports/...

GET

Read - Computers

/computerhistory/...

GET

Read - Computers

/computerinventorycollection

GET

Read - Computer Inventory Collection

/computerinventorycollection

PUT

Update - Computer Inventory Collection

/computerinvitations

GET

Read - Computer Enrollment Invitations

/computerinvitations/id/{id}

GET

Read - Computer Enrollment Invitations

/computerinvitations/id/{id}

POST

Create - Computer Enrollment Invitations

/computerinvitations/id/{id}

DELETE

Delete - Computer Enrollment Invitations

/computermanagement

GET

Read - Computers

/computers

GET

Read - Computers

/computers/id/{id}

GET

Read - Computers

/computers/id/{id}

POST

Create - Computers

Create - Users

/computers/id/{id}

PUT

Update - Computers

Update - Users

/computers/id/{id}

DELETE

Delete - Computers

/departments

GET

Read - Departments

/departments/id/{id}

GET

Read - Departments

/departments/id/{id}

POST

Create - Departments

/departments/id/{id}

PUT

Update - Departments

/departments/id/{id}

DELETE

Delete - Departments

/directorybindings

GET

Read - Directory Bindings

/directorybindings/id/{id}

GET

Read - Directory Bindings

/directorybindings/id/{id}

POST

Create - Directory Bindings

/directorybindings/id/{id}

PUT

Update - Directory Bindings

/directorybindings/id/{id}

DELETE

Delete - Directory Bindings

/diskencryptionconfigurations

GET

Read - Disk Encryption Configurations

/diskencryptionconfigurations/id/{id}

GET

Read - Disk Encryption Configurations

/diskencryptionconfigurations/id/{id}

POST

Create - Disk Encryption Configurations

/diskencryptionconfigurations/id/{id}

PUT

Update - Disk Encryption Configurations

/diskencryptionconfigurations/id/{id}

DELETE

Delete - Disk Encryption Configurations

/distributionpoints

GET

Read - File Share Distribution Points

/distributionpoints/id/{id}

GET

Read - File Share Distribution Points

/distributionpoints/id/{id}

POST

Create - File Share Distribution Points

/distributionpoints/id/{id}

PUT

Update - File Share Distribution Points

/distributionpoints/id/{id}

DELETE

Delete - File Share Distribution Points

/dockitems

GET

Read - Dock Items

/dockitems/id/{id}

GET

Read - Dock Items

/dockitems/id/{id}

POST

Create - Dock Items

/dockitems/id/{id}

PUT

Update - Dock Items

/dockitems/id/{id}

DELETE

Delete - Dock Items

/ebooks

GET

Read - eBooks

/ebooks/id/{id}

GET

Read - eBooks

/ebooks/id/{id}

POST

Create - eBooks

/ebooks/id/{id}

PUT

Update - eBooks

/ebooks/id/{id}

DELETE

Delete - eBooks

/fileuploads/computers/...

POST

Create - Computers

/fileuploads/mobiledevices/...

POST

Create - Mobile Devices

/fileuploads/enrollmentprofiles/...

POST

Non-functional

/fileuploads/printers/...

POST

Non-functional

/fileuploads/peripherals/...

POST

Create - Computers

/fileuploads/policies/...

POST

Create - Policies

/fileuploads/ebooks/...

POST

Create - eBooks

/fileuploads/mobiledeviceapplicationsicon/...

POST

Create - Mobile Device Apps

/fileuploads/mobiledeviceapplicationsipa/...

POST

Create - Mobile Device Apps

/fileuploads/diskencryptionconfigurations/...

POST

Create - Disk Encryption Configurations

/gsxconnection

GET

Read - GSX Connection

/gsxconnection

PUT

Update - GSX Connection

/healthcarelistener

GET

Read - Infrastructure Manager Instances

/healthcarelistener/id/{id}

GET

Read - Infrastructure Manager Instances

/healthcarelistener/id/{id}

PUT

Update - Infrastructure Manager Instances

/healthcarelistenerrule

GET

Read - Infrastructure Manager Instances

/healthcarelistenerrule/id/{id}

GET

Read - Infrastructure Manager Instances

/healthcarelistenerrule/id/{id}

POST

Create - Infrastructure Manager Instances

/healthcarelistenerrule/id/{id}

PUT

Update - Infrastructure Manager Instances

/healthcarelistenerrule/id/{id}

DELETE

Delete - Infrastructure Manager Instances

/ibeacons

GET

Read - iBeacons

/ibeacons/id/{id}

GET

Read - iBeacons

/ibeacons/id/{id}

POST

Create - iBeacons

/ibeacons/id/{id}

PUT

Update - iBeacons

/ibeacons/id/{id}

DELETE

Delete - iBeacons

/infrastructuremanager

GET

Read - Infrastructure Manager Instances

/infrastructuremanager/id/{id}

GET

Read - Infrastructure Manager Instances

/infrastructuremanager/id/{id}

PUT

Update - Infrastructure Manager Instances

/jsonwebtokenconfigurations

GET

Read - JSON Web Token Configurations

/jsonwebtokenconfigurations/id/{id}

GET

Read - JSON Web Token Configurations

/jsonwebtokenconfigurations/id/{id}

POST

Create - JSON Web Token Configurations

/jsonwebtokenconfigurations/id/{id}

PUT

Update - JSON Web Token Configurations

/jsonwebtokenconfigurations/id/{id}

DELETE

Delete - JSON Web Token Configurations

/ldapservers

GET

Read - LDAP Servers

/ldapservers/id/{id}

GET

Read - LDAP Servers

/ldapservers/id/{id}

POST

Create - LDAP Servers

/ldapservers/id/{id}

PUT

Update - LDAP Servers

/ldapservers/id/{id}

DELETE

Delete - LDAP Servers

/licensedsoftware

GET

Read - Licensed Software Records

/licensedsoftware/id/{id}

GET

Read - Licensed Software Records

/licensedsoftware/id/{id}

POST

Create - Licensed Software Records

/licensedsoftware/id/{id}

PUT

Update - Licensed Software Records

/licensedsoftware/id/{id}

DELETE

Delete - Licensed Software Records

/logflush...

DELETE

Delete - Policies
Flush Policy Logs (Jamf Pro Server Actions)

/macapplications

GET

Read - Mac App Store Apps

/macapplications/id/{id}

GET

Read - Mac App Store Apps

/macapplications/id/{id}

POST

Create - Mac App Store Apps

/macapplications/id/{id}

PUT

Update - Mac App Store Apps

/macapplications/id/{id}

DELETE

Delete - Mac App Store Apps

/managedpreferenceprofiles

GET

Read - Managed Preference Profiles

/managedpreferenceprofiles/id/{id}

GET

Read - Managed Preference Profiles

/managedpreferenceprofiles/id/{id}

POST

Create - Managed Preference Profiles

/managedpreferenceprofiles/id/{id}

PUT

Update - Managed Preference Profiles

/managedpreferenceprofiles/id/{id}

DELETE

Delete - Managed Preference Profiles

/mobiledeviceapplications

GET

Read - Mobile Device Apps

/mobiledeviceapplications/id/{id}

GET

Read - Mobile Device Apps

/mobiledeviceapplications/id/{id}

POST

Create - Mobile Device Apps

/mobiledeviceapplications/id/{id}

PUT

Update - Mobile Device Apps

/mobiledeviceapplications/id/{id}

DELETE

Delete - Mobile Device Apps

/mobiledevicecommands

GET

Read - Mobile Devices

/mobiledevicecommands/...

GET

Read - Mobile Devices

/mobiledevicecommands/command...

POST

Create - Mobile Devices

Send Mobile Device ed privileges (Jamf Pro Server Actions)

/mobiledeviceconfigurationprofiles

GET

Read - Mobile Device Configuration Profiles

/mobiledeviceconfigurationprofiles/id/{id}

GET

Read - Mobile Device Configuration Profiles

/mobiledeviceconfigurationprofiles/id/{id}

POST

Create - Mobile Device Configuration Profiles

/mobiledeviceconfigurationprofiles/id/{id}

PUT

Update - Mobile Device Configuration Profiles

/mobiledeviceconfigurationprofiles/id/{id}

DELETE

Delete - Mobile Device Configuration Profiles

/mobiledeviceenrollmentprofiles

GET

Read - Enrollment Profiles

/mobiledeviceenrollmentprofiles/id/{id}

GET

Read - Enrollment Profiles

/mobiledeviceenrollmentprofiles/id/{id}

POST

Create - Enrollment Profiles

/mobiledeviceenrollmentprofiles/id/{id}

PUT

Update - Enrollment Profiles

/mobiledeviceenrollmentprofiles/id/{id}

DELETE

Delete - Enrollment Profiles

/mobiledeviceextensionattributes

GET

Read - Mobile Device Extension Attributes

/mobiledeviceextensionattributes/id/{id}

GET

Read - Mobile Device Extension Attributes

/mobiledeviceextensionattributes/id/{id}

POST

Create - Mobile Device Extension Attributes

/mobiledeviceextensionattributes/id/{id}

PUT

Update - Mobile Device Extension Attributes

/mobiledeviceextensionattributes/id/{id}

DELETE

Delete - Mobile Device Extension Attributes

/mobiledevicegroups

GET

Read - Smart Mobile Device Groups (for smart groups)

Read - Static Mobile Device Groups (for static groups)

/mobiledevicegroups/id/{id}

GET

Read - Smart Mobile Device Groups (for smart groups)

Read - Static Mobile Device Groups (for static groups)

/mobiledevicegroups/id/{id}

POST

Create - Smart Mobile Device Groups (for smart groups)

Create - Static Mobile Device Groups (for static groups

/mobiledevicegroups/id/{id}

PUT

Update - Smart Mobile Device Groups (for smart groups)

Update - Static Mobile Device Groups (for static groups)

/mobiledevicegroups/id/{id}

DELETE

Delete - Smart Mobile Device Groups (for smart groups)

Delete - Static Mobile Device Groups (for static groups)

/mobiledevicehistory/...

GET

Read - Mobile Devices

/mobiledeviceinvitations

GET

Read - Mobile Device Enrollment Invitations

/mobiledeviceinvitations/id/{id}

GET

Read - Mobile Device Enrollment Invitations

/mobiledeviceinvitations/id/{id}

POST

Create - Mobile Device Enrollment Invitations

/mobiledeviceinvitations/id/{id}

DELETE

Delete - Mobile Device Enrollment Invitations

/mobiledeviceprovisioningprofiles

GET

Read - Provisioning Profiles

/mobiledeviceprovisioningprofiles/id/{id}

GET

Read - Provisioning Profiles

/mobiledeviceprovisioningprofiles/id/{id}

POST

Create - Provisioning Profiles

/mobiledeviceprovisioningprofiles/id/{id}

PUT

Update - Provisioning Profiles

/mobiledeviceprovisioningprofiles/id/{id}

DELETE

Delete - Provisioning Profiles

/mobiledevices

GET

Read - Mobile Devices

/mobiledevices/id/{id}

GET

Read - Mobile Devices

/mobiledevices/id/{id}

POST

Create - Mobile Devices

Create - Users

/mobiledevices/id/{id}

PUT

Update - Mobile Devices

Update - Users

/mobiledevices/id/{id}

DELETE

Delete - Mobile Devices

/networksegments

GET

Read - Network Segments

/networksegments/id/{id}

GET

Read - Network Segments

/networksegments/id/{id}

POST

Create - Network Segments

/networksegments/id/{id}

PUT

Update - Network Segments

/networksegments/id/{id}

DELETE

Delete - Network Segments

/osxconfigurationprofiles

GET

Read - macOS Configuration Profiles

/osxconfigurationprofiles/id/{id}

GET

Read - macOS Configuration Profiles

/osxconfigurationprofiles/id/{id}

POST

Create - macOS Configuration Profiles

/osxconfigurationprofiles/id/{id}

PUT

Update - macOS Configuration Profiles

/osxconfigurationprofiles/id/{id}

DELETE

Delete - macOS Configuration Profiles

/packages

GET

Read - Packages

/packages/id/{id}

GET

Read - Packages

/packages/id/{id}

POST

Create - Packages

/packages/id/{id}

PUT

Update - Packages

/packages/id/{id}

DELETE

Delete - Packages

/patchavailabletitles/sourceid/{id}

GET

Read - Patch Management Software Titles

/patchexternalsources

GET

Read - External Patch Sources

/patchexternalsources/id/{id}

GET

Read - External Patch Sources

/patchexternalsources/id/{id}

POST

Create - External Patch Sources

/patchexternalsources/id/{id}

PUT

Update - External Patch Sources

/patchexternalsources/id/{id}

DELETE

Delete - External Patch Sources

/patchinternalsources...

GET

Read - Internal Patch Sources (Jamf Pro Server Settings)

/patchpolicies

GET

Read - Patch Management Software Titles

Read - Patch Policies

/patchpolicies/id/{id}

GET

Read - Patch Management Software Titles

Read - Patch Policies

/patchpolicies/id/{id}

POST

Create - Patch Policies

/patchpolicies/id/{id}

PUT

Update - Patch Policies

/patchpolicies/id/{id}

DELETE

Delete - Patch Policies

/patchreports...

GET

Read - Patch Management Software Titles

/patchsoftwaretitles

GET

Read - Patch Management Software Titles

/patchsoftwaretitles/id/{id}

GET

Read - Patch Management Software Titles

/patchsoftwaretitles/id/{id}

POST

Create - Patch Management Software Titles

/patchsoftwaretitles/id/{id}

PUT

Update - Patch Management Software Titles

/patchsoftwaretitles/id/{id}

DELETE

Delete - Patch Management Software Titles

Delete - Extension Attributes (if the patch title includes an Extension Attribute)

/peripherals

GET

Read - Computers

/peripherals/id/{id}

GET

Read - Computers

/peripherals/id/{id}

POST

Create - Computers

/peripherals/id/{id}

PUT

Update - Computers

/peripherals/id/{id}

DELETE

Delete - Computers

/peripheraltypes

GET

Read - Peripheral Types

/peripheraltypes/id/{id}

GET

Read - Peripheral Types

/peripheraltypes/id/{id}

POST

Create - Peripheral Types

/peripheraltypes/id/{id}

PUT

Update - Peripheral Types

/peripheraltypes/id/{id}

DELETE

Delete - Peripheral Types

/policies...

GET

Read - Policies

/policies/id/{id}

GET

Read - Policies

/policies/id/{id}

POST

Create - Policies

/policies/id/{id}

PUT

Update - Policies

/policies/id/{id}

DELETE

Delete - Policies

/printers

GET

Read - Printers

/printers/id/{id}

GET

Read - Printers

/printers/id/{id}

POST

Create - Printers

/printers/id/{id}

PUT

Update - Printers

/printers/id/{id}

DELETE

Delete - Printers

/removablemacaddresses

GET

Read - Removable MAC Addresses

/removablemacaddresses/id/{id}

GET

Read - Removable MAC Addresses

/removablemacaddresses/id/{id}

POST

Create - Removable MAC Addresses

/removablemacaddresses/id/{id}

PUT

Update - Removable MAC Addresses

/removablemacaddresses/id/{id}

DELETE

Delete - Removable MAC Addresses

/restrictedsoftware

GET

Read - Restricted Software Records

/restrictedsoftware/id/{id}

GET

Read - Restricted Software Records

/restrictedsoftware/id/{id}

POST

Create - Restricted Software Records

/restrictedsoftware/id/{id}

PUT

Update - Restricted Software Records

/restrictedsoftware/id/{id}

DELETE

Delete - Restricted Software Records

/scripts

GET

Read - Scripts

/scripts/id/{id}

GET

Read - Scripts

/scripts/id/{id}

POST

Create - Scripts

/scripts/id/{id}

PUT

Update - Scripts

/scripts/id/{id}

DELETE

Delete - Scripts

/sites

GET

Read - Sites

/sites/id/{id}

GET

Read - Sites

/sites/id/{id}

POST

Create - Sites

/sites/id/{id}

PUT

Update - Sites

/sites/id/{id}

DELETE

Delete - Sites

/smtpserver

GET

Read - SMTP Server (Jamf Pro Server Settings)

/smtpserver

PUT

Update - SMTP Server (Jamf Pro Server Settings)

/softwareupdateservers

GET

Read - Software Update Servers

/softwareupdateservers/id/{id}

GET

Read - Software Update Servers

/softwareupdateservers/id/{id}

POST

Create - Software Update Servers

/softwareupdateservers/id/{id}

PUT

Update - Software Update Servers

/softwareupdateservers/id/{id}

DELETE

Delete - Software Update Servers

/userextensionattributes

GET

Read - User Extension Attributes

/userextensionattributes/id/{id}

GET

Read - User Extension Attributes

/userextensionattributes/id/{id}

POST

Create - User Extension Attributes

/userextensionattributes/id/{id}

PUT

Update - User Extension Attributes

/userextensionattributes/id/{id}

DELETE

Delete - User Extension Attributes

/usergroups

GET

Read - Smart User Groups OR Static User Groups

/usergroups/id/{id}

GET

Read - Smart User Groups (for smart groups)

Read - Static User Groups (for static groups)

/usergroups/id/{id}

POST

Create - Smart User Groups (for smart groups)

Create - Static User Groups (for static groups)

/usergroups/id/{id}

PUT

Update - Smart User Groups (for smart groups)

Update - Static User Groups (for static groups)

/usergroups/id/{id}

DELETE

Delete - Smart User Groups (for smart groups)

Delete - Static User Groups (for static groups)

/users

GET

Read - Users

/users/id/{id}

GET

Read - Users

/users/id/{id}

POST

Create - Users

/users/id/{id}

PUT

Update - Users

/users/id/{id}

DELETE

Delete - Users

/vppaccounts

GET

Read - VPP Admin Accounts

/vppaccounts/id/{id}

GET

Read - VPP Admin Accounts

/vppaccounts/id/{id}

POST

Create - VPP Admin Accounts

/vppaccounts/id/{id}

PUT

Update - VPP Admin Accounts

/vppaccounts/id/{id}

DELETE

Delete - VPP Admin Accounts

/vppassignments

GET

Read - VPP Assignments

/vppassignments/id/{id}

GET

Read - VPP Assignments

/vppassignments/id/{id}

POST

Create - VPP Assignments

/vppassignments/id/{id}

PUT

Update - VPP Assignments

/vppassignments/id/{id}

DELETE

Delete - VPP Assignments

/vppinvitations

GET

Read - VPP Invitations

/vppinvitations/id/{id}

GET

Read - VPP Invitations

/vppinvitations/id/{id}

POST

Create - VPP Invitations

/vppinvitations/id/{id}

PUT

Update - VPP Invitations

/vppinvitations/id/{id}

DELETE

Delete - VPP Invitations

/webhooks

GET

Read - Webhooks

/webhooks/id/{id}

GET

Read - Webhooks

/webhooks/id/{id}

POST

Create - Webhooks

/webhooks/id/{id}

PUT

Update - Webhooks

/webhooks/id/{id}

DELETE

Delete - Webhooks