Classic API Minimum Required Privileges and Endpoint Mapping

The following table describes the minimum required privileges for a Jamf Pro user account to interact with an endpoint via the given HTTP operation. All other URIs that allow interaction with a different resource identifier (e.g. {name}, {serialnumber},{udid}, etc.) should require the same privilege(s) to interact with the endpoint/operation combination defined by the {id} resource identifier.

Endpoint Operation Required Privilege(s)
/accounts GET Read - Jamf Pro User Accounts & Groups
/accounts/userid/{id} GET Read - Jamf Pro User Accounts & Groups
/accounts/userid/{id} POST Create - Jamf Pro User Accounts & Groups
/accounts/userid/{id} PUT Update - Jamf Pro User Accounts & Groups
/accounts/userid/{id} DELETE Delete - Jamf Pro User Accounts & Groups
/accounts/groupid/{id} GET Read - Jamf Pro User Accounts & Groups
/accounts/groupid/{id} POST Create - Jamf Pro User Accounts & Groups
/accounts/groupid/{id} PUT Update - Jamf Pro User Accounts & Groups
/accounts/groupid/{id} DELETE Delete - Jamf Pro User Accounts & Groups
/activationcode GET Read - Activation Code
/activationcode PUT Update - Activation Code
/advancedcomputersearches GET Read - Advanced Computer Searches
/advancedcomputersearches/id/{id} GET Read - Advanced Computer Searches
/advancedcomputersearches/id/{id} POST Create - Advanced Computer Searches
/advancedcomputersearches/id/{id} PUT Update - Advanced Computer Searches
/advancedcomputersearches/id/{id} DELETE Delete - Advanced Computer Searches
/advancedmobiledevicesearches GET Read - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id} GET Read - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id} POST Create - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id} PUT Update - Advanced Mobile Device Searches
/advancedmobiledevicesearches/id/{id} DELETE Delete - Advanced Mobile Device Searches
/advancedusersearches GET Read - Advanced User Searches
/advancedusersearches/id/{id} GET Read - Advanced User Searches
/advancedusersearches/id/{id} POST Create - Advanced User Searches
/advancedusersearches/id/{id} PUT Update - Advanced User Searches
/advancedusersearches/id/{id} DELETE Delete - Advanced User Searches
/allowedfileextensions GET Read - Allowed File Extensions
/allowedfileextensions/id/{id} GET Read - Allowed File Extensions
/allowedfileextensions/id/{id} POST Create - Allowed File Extensions
/allowedfileextensions/id/{id} DELETE Delete - Allowed File Extensions
/buildings GET Read - Buildings
/buildings/id/{id} GET Read - Buildings
/buildings/id/{id} POST Create - Buildings
/buildings/id/{id} PUT Update - Buildings
/buildings/id/{id} DELETE Delete - Buildings
/byoprofiles GET Read - Personal Device Profiles
/byoprofiles/id/{id} GET Read - Personal Device Profiles
/byoprofiles/id/{id} POST Create - Personal Device Profiles
/byoprofiles/id/{id} PUT Update - Personal Device Profiles
/byoprofiles/id/{id} DELETE Delete - Personal Device Profiles
/categories GET Read - Categories
/categories/id/{id} GET Read - Categories
/categories/id/{id} POST Create - Categories
/categories/id/{id} PUT Update - Categories
/categories/id/{id} DELETE Delete - Categories
/classes GET Read - Classes
/classes/id/{id} GET Read - Classes
/classes/id/{id} POST Create - Classes
/classes/id/{id} PUT Update - Classes
/classes/id/{id} DELETE Delete - Classes
/commandflush DELETE None
/commandflush/{idtype}/id/{id}/status/{status} DELETE None
/computerapplications/... GET Read - Advanced Computer Searches
/computerapplicationusage/... GET Read - Computers
/computercheckin GET Read - Check-In
/computercheckin PUT Update - Check-In
/computercommands/... GET Read - Computers
/computercommands/... POST

Create - Computers

Send Computer... (Jamf Pro Server Settings)

/computerconfigurations GET Read - Configurations
/computerconfigurations/id/{id} GET Read - Configurations
/computerconfigurations/id/{id} POST Create - Configurations
/computerconfigurations/id/{id} PUT Update - Configurations
/computerconfigurations/id/{id} DELETE Delete - Configurations
/computerextensionattributes GET Read - Extension Attributes
/computerextensionattributes/id/{id} GET Read - Extension Attributes
/computerextensionattributes/id/{id} POST Create - Extension Attributes
/computerextensionattributes/id/{id} PUT Update - Extension Attributes
/computerextensionattributes/id/{id} DELETE Delete - Extension Attributes
/computergroups GET

Read - Smart Computer Groups (for smart groups)

Read - Static Computer Groups (for static groups)

/computergroups/id/{id} GET

Read - Smart Computer Groups (for smart groups)

Read - Static Computer Groups (for static groups)

/computergroups/id/{id} POST

Create - Smart Computer Groups (for smart groups)

Create - Static Computer Groups (for static groups)

/computergroups/id/{id} PUT

Update - Smart Computer Groups (for smart groups)

Update - Static Computer Groups (for static groups)

/computergroups/id/{id} DELETE

Delete - Smart Computer Groups (for smart groups)

Delete - Static Computer Groups (for static groups)

/computerhardwaresoftwarereports/... GET Read - Computers
/computerhistory/... GET Read - Computers
/computerinventorycollection GET Read - Computer Inventory Collection
/computerinventorycollection PUT Update - Computer Inventory Collection
/computerinvitations GET Read - Computer Enrollment Invitations
/computerinvitations/id/{id} GET Read - Computer Enrollment Invitations
/computerinvitations/id/{id} POST Create - Computer Enrollment Invitations
/computerinvitations/id/{id} DELETE Delete - Computer Enrollment Invitations
/computermanagement GET Read - Computers
/computers GET Read - Computers
/computers/id/{id} GET Read - Computers
/computers/id/{id} POST

Create - Computers

Create - Users

/computers/id/{id} PUT

Update - Computers

Update - Users

/computers/id/{id} DELETE Delete - Computers
/departments GET Read - Departments
/departments/id/{id} GET Read - Departments
/departments/id/{id} POST Create - Departments
/departments/id/{id} PUT Update - Departments
/departments/id/{id} DELETE Delete - Departments
/directorybindings GET Read - Directory Bindings
/directorybindings/id/{id} GET Read - Directory Bindings
/directorybindings/id/{id} POST Create - Directory Bindings
/directorybindings/id/{id} PUT Update - Directory Bindings
/directorybindings/id/{id} DELETE Delete - Directory Bindings
/diskencryptionconfigurations GET Read - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id} GET Read - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id} POST Create - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id} PUT Update - Disk Encryption Configurations
/diskencryptionconfigurations/id/{id} DELETE Delete - Disk Encryption Configurations
/distributionpoints GET Read - File Share Distribution Points
/distributionpoints/id/{id} GET Read - File Share Distribution Points
/distributionpoints/id/{id} POST Create - File Share Distribution Points
/distributionpoints/id/{id} PUT Update - File Share Distribution Points
/distributionpoints/id/{id} DELETE Delete - File Share Distribution Points
/dockitems GET Read - Dock Items
/dockitems/id/{id} GET Read - Dock Items
/dockitems/id/{id} POST Create - Dock Items
/dockitems/id/{id} PUT Update - Dock Items
/dockitems/id/{id} DELETE Delete - Dock Items
/ebooks GET Read - eBooks
/ebooks/id/{id} GET Read - eBooks
/ebooks/id/{id} POST Create - eBooks
/ebooks/id/{id} PUT Update - eBooks
/ebooks/id/{id} DELETE Delete - eBooks
/fileuploads/computers/... POST Create - Computers
/fileuploads/mobiledevices/... POST Create - Mobile Devices
/fileuploads/enrollmentprofiles/... POST Non-functional
/fileuploads/printers/... POST Non-functional
/fileuploads/peripherals/... POST Create - Computers
/fileuploads/policies/... POST Create - Policies
/fileuploads/ebooks/... POST Create - eBooks
/fileuploads/mobiledeviceapplicationsicon/... POST Create - Mobile Device Apps
/fileuploads/mobiledeviceapplicationsipa/... POST Create - Mobile Device Apps
/fileuploads/diskencryptionconfigurations/... POST Create - Disk Encryption Configurations
/gsxconnection GET Read - GSX Connection
/gsxconnection PUT Update - GSX Connection
/healthcarelistener GET Read - Infrastructure Manager Instances
/healthcarelistener/id/{id} GET Read - Infrastructure Manager Instances
/healthcarelistener/id/{id} PUT Update - Infrastructure Manager Instances
/healthcarelistenerrule GET Read - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id} GET Read - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id} POST Create - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id} PUT Update - Infrastructure Manager Instances
/healthcarelistenerrule/id/{id} DELETE Delete - Infrastructure Manager Instances
/ibeacons GET Read - iBeacons
/ibeacons/id/{id} GET Read - iBeacons
/ibeacons/id/{id} POST Create - iBeacons
/ibeacons/id/{id} PUT Update - iBeacons
/ibeacons/id/{id} DELETE Delete - iBeacons
/infrastructuremanager GET Read - Infrastructure Manager Instances
/infrastructuremanager/id/{id} GET Read - Infrastructure Manager Instances
/infrastructuremanager/id/{id} PUT Update - Infrastructure Manager Instances
/jsonwebtokenconfigurations GET Read - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id} GET Read - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id} POST Create - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id} PUT Update - JSON Web Token Configurations
/jsonwebtokenconfigurations/id/{id} DELETE Delete - JSON Web Token Configurations
/ldapservers GET Read - LDAP Servers
/ldapservers/id/{id} GET Read - LDAP Servers
/ldapservers/id/{id} POST Create - LDAP Servers
/ldapservers/id/{id} PUT Update - LDAP Servers
/ldapservers/id/{id} DELETE Delete - LDAP Servers
/licensedsoftware GET Read - Licensed Software Records
/licensedsoftware/id/{id} GET Read - Licensed Software Records
/licensedsoftware/id/{id} POST Create - Licensed Software Records
/licensedsoftware/id/{id} PUT Update - Licensed Software Records
/licensedsoftware/id/{id} DELETE Delete - Licensed Software Records
/logflush... DELETE Flush Policy Logs (Jamf Pro Server Actions)
/macapplications GET Read - Mac App Store Apps
/macapplications/id/{id} GET Read - Mac App Store Apps
/macapplications/id/{id} POST Create - Mac App Store Apps
/macapplications/id/{id} PUT Update - Mac App Store Apps
/macapplications/id/{id} DELETE Delete - Mac App Store Apps
/managedpreferenceprofiles GET Read - Managed Preference Profiles
/managedpreferenceprofiles/id/{id} GET Read - Managed Preference Profiles
/managedpreferenceprofiles/id/{id} POST Create - Managed Preference Profiles
/managedpreferenceprofiles/id/{id} PUT Update - Managed Preference Profiles
/managedpreferenceprofiles/id/{id} DELETE Delete - Managed Preference Profiles
/mobiledeviceapplications GET Read - Mobile Device Apps
/mobiledeviceapplications/id/{id} GET Read - Mobile Device Apps
/mobiledeviceapplications/id/{id} POST Create - Mobile Device Apps
/mobiledeviceapplications/id/{id} PUT Update - Mobile Device Apps
/mobiledeviceapplications/id/{id} DELETE Delete - Mobile Device Apps
/mobiledevicecommands GET Read - Mobile Devices
/mobiledevicecommands/... GET Read - Mobile Devices
/mobiledevicecommands... POST

Create - Mobile Devices

Send Mobile Device... (Jamf Pro Server Actions)

/mobiledeviceconfigurationprofiles GET Read - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id} GET Read - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id} POST Create - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id} PUT Update - Mobile Device Configuration Profiles
/mobiledeviceconfigurationprofiles/id/{id} DELETE Delete - Mobile Device Configuration Profiles
/mobiledeviceenrollmentprofiles GET Read - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id} GET Read - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id} POST Create - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id} PUT Update - Enrollment Profiles
/mobiledeviceenrollmentprofiles/id/{id} DELETE Delete - Enrollment Profiles
/mobiledeviceextensionattributes GET Read - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id} GET Read - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id} POST Create - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id} PUT Update - Mobile Device Extension Attributes
/mobiledeviceextensionattributes/id/{id} DELETE Delete - Mobile Device Extension Attributes
/mobiledevicegroups GET

Read - Smart Mobile Device Groups (for smart groups)

Read - Static Mobile Device Groups (for static groups)

/mobiledevicegroups/id/{id} GET

Read - Smart Mobile Device Groups (for smart groups)

Read - Static Mobile Device Groups (for static groups)

/mobiledevicegroups/id/{id} POST

Create - Smart Mobile Device Groups (for smart groups)

Create - Static Mobile Device Groups (for static groups)

/mobiledevicegroups/id/{id} PUT

Update - Smart Mobile Device Groups (for smart groups)

Update - Static Mobile Device Groups (for static groups)

/mobiledevicegroups/id/{id} DELETE

Delete - Smart Mobile Device Groups (for smart groups)

Delete - Static Mobile Device Groups (for static groups)

/mobiledevicehistory/... GET Read - Mobile Devices
/mobiledeviceinvitations GET Read - Mobile Device Enrollment Invitations
/mobiledeviceinvitations/id/{id} GET Read - Mobile Device Enrollment Invitations
/mobiledeviceinvitations/id/{id} POST Create - Mobile Device Enrollment Invitations
/mobiledeviceinvitations/id/{id} DELETE Delete - Mobile Device Enrollment Invitations
/mobiledeviceprovisioningprofiles GET Read - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id} GET Read - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id} POST Create - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id} PUT Update - Provisioning Profiles
/mobiledeviceprovisioningprofiles/id/{id} DELETE Delete - Provisioning Profiles
/mobiledevices GET Read - Mobile Devices
/mobiledevices/id/{id} GET Read - Mobile Devices
/mobiledevices/id/{id} POST

Create - Mobile Devices

Create - Users

/mobiledevices/id/{id} PUT

Update - Mobile Devices

Update - Users

/mobiledevices/id/{id} DELETE Delete - Mobile Devices
/netbootservers GET Read - NetBoot Servers
/netbootservers/id/{id} GET Read - NetBoot Servers
/netbootservers/id/{id} POST Create - NetBoot Servers
/netbootservers/id/{id} PUT Update - NetBoot Servers
/netbootservers/id/{id} DELETE Delete - NetBoot Servers
/networksegments GET Read - Network Segments
/networksegments/id/{id} GET Read - Network Segments
/networksegments/id/{id} POST Create - Network Segments
/networksegments/id/{id} PUT Update - Network Segments
/networksegments/id/{id} DELETE Delete - Network Segments
/osxconfigurationprofiles GET Read - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id} GET Read - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id} POST Create - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id} PUT Update - macOS Configuration Profiles
/osxconfigurationprofiles/id/{id} DELETE Delete - macOS Configuration Profiles
/packages GET Read - Packages
/packages/id/{id}
GET Read - Packages
/packages/id/{id} POST Create - Packages
/packages/id/{id} PUT Update - Packages
/packages/id/{id} DELETE Delete - Packages
/patchavailabletitles/sourceid/{id} GET Read - Patch Management Software Titles
/patchexternalsources GET Read - External Patch Sources
/patchexternalsources/id/{id} GET Read - External Patch Sources
/patchexternalsources/id/{id} POST Create - External Patch Sources
/patchexternalsources/id/{id} PUT Update - External Patch Sources
/patchexternalsources/id/{id} DELETE Delete - External Patch Sources
/patchinternalsources... GET Read - Internal Patch Sources (Jamf Pro Server Settings)
/patchpolicies GET

Read - Patch Management Software Titles

Read - Patch Policies

/patchpolicies/id/{id} GET

Read - Patch Management Software Titles

Read - Patch Policies

/patchpolicies/id/{id} POST Create - Patch Policies
/patchpolicies/id/{id} PUT Update - Patch Policies
/patchpolicies/id/{id} DELETE Delete - Patch Policies
/patchreports... GET Read - Patch Management Software Titles
/patchsoftwaretitles GET Read - Patch Management Software Titles
/patchsoftwaretitles/id/{id} GET Read - Patch Management Software Titles
/patchsoftwaretitles/id/{id} POST Create - Patch Management Software Titles
/patchsoftwaretitles/id/{id} PUT Update - Patch Management Software Titles
/patchsoftwaretitles/id/{id} DELETE

Delete - Patch Management Software Titles

Delete - Extension Attributes (if the patch title includes an Extension Attribute)

/peripherals GET Read - Computers
/peripherals/id/{id} GET Read - Computers
/peripherals/id/{id} POST Create - Computers
/peripherals/id/{id} PUT Update - Computers
/peripherals/id/{id} DELETE Delete - Computers
/peripheraltypes GET Read - Peripheral Types
/peripheraltypes/id/{id} GET Read - Peripheral Types
/peripheraltypes/id/{id} POST Create - Peripheral Types
/peripheraltypes/id/{id} PUT Update - Peripheral Types
/peripheraltypes/id/{id} DELETE Delete - Peripheral Types
/policies... GET Read - Policies
/policies/id/{id} GET Read - Policies
/policies/id/{id} POST Create - Policies
/policies/id/{id} PUT Update - Policies
/policies/id/{id} DELETE Delete - Policies
/printers GET Read - Printers
/printers/id/{id} GET Read - Printers
/printers/id/{id} POST Create - Printers
/printers/id/{id} PUT Update - Printers
/printers/id/{id} DELETE Delete - Printers
/removablemacaddresses GET Read - Removable MAC Addresses
/removablemacaddresses/id/{id} GET Read - Removable MAC Addresses
/removablemacaddresses/id/{id} POST Create - Removable MAC Addresses
/removablemacaddresses/id/{id} PUT Update - Removable MAC Addresses
/removablemacaddresses/id/{id} DELETE Delete - Removable MAC Addresses
/restrictedsoftware GET Read - Restricted Software Records
/restrictedsoftware/id/{id} GET Read - Restricted Software Records
/restrictedsoftware/id/{id} POST Create - Restricted Software Records
/restrictedsoftware/id/{id} PUT Update - Restricted Software Records
/restrictedsoftware/id/{id} DELETE Delete - Restricted Software Records
/scripts GET Read - Scripts
/scripts/id/{id} GET Read - Scripts
/scripts/id/{id} POST Create - Scripts
/scripts/id/{id} PUT Update - Scripts
/scripts/id/{id} DELETE Delete - Scripts
/sites GET Read - Sites
/sites/id/{id} GET Read - Sites
/sites/id/{id} POST Create - Sites
/sites/id/{id} PUT Update - Sites
/sites/id/{id} DELETE Delete - Sites
/smtpserver GET Read - SMTP Server (Jamf Pro Server Settings)
/smtpserver PUT Non-functional
/softwareupdateservers GET Read - Software Update Servers
/softwareupdateservers/id/{id} GET Read - Software Update Servers
/softwareupdateservers/id/{id} POST Create - Software Update Servers
/softwareupdateservers/id/{id} PUT Update - Software Update Servers
/softwareupdateservers/id/{id} DELETE Delete - Software Update Servers
/userextensionattributes GET Read - User Extension Attributes
/userextensionattributes/id/{id} GET Read - User Extension Attributes
/userextensionattributes/id/{id} POST Create - User Extension Attributes
/userextensionattributes/id/{id} PUT Update - User Extension Attributes
/userextensionattributes/id/{id} DELETE Delete - User Extension Attributes
/usergroups GET Read - Smart User Groups OR Static User Groups
/usergroups/id/{id} GET

Read - Smart User Groups (for smart groups)

Read - Static User Groups (for static groups)

/usergroups/id/{id} POST

Create - Smart User Groups (for smart groups)

Create - Static User Groups (for static groups)

/usergroups/id/{id} PUT

Update - Smart User Groups (for smart groups)

Update - Static User Groups (for static groups)

/usergroups/id/{id} DELETE

Delete - Smart User Groups (for smart groups)

Delete - Static User Groups (for static groups)

/users GET Read - Users
/users/id/{id} GET Read - Users
/users/id/{id} POST Create - Users
/users/id/{id} PUT Update - Users
/users/id/{id} DELETE Delete - Users
/vppaccounts GET Read - VPP Admin Accounts
/vppaccounts/id/{id} GET Read - VPP Admin Accounts
/vppaccounts/id/{id} POST Create - VPP Admin Accounts
/vppaccounts/id/{id} PUT Update - VPP Admin Accounts
/vppaccounts/id/{id} DELETE Delete - VPP Admin Accounts
/vppassignments GET Read - VPP Assignments
/vppassignments/id/{id} GET Read - VPP Assignments
/vppassignments/id/{id} POST Create - VPP Assignments
/vppassignments/id/{id} PUT Update - VPP Assignments
/vppassignments/id/{id} DELETE Delete - VPP Assignments
/vppinvitations GET Read - VPP Invitations
/vppinvitations/id/{id} GET Read - VPP Invitations
/vppinvitations/id/{id} POST Create - VPP Invitations
/vppinvitations/id/{id} PUT Update - VPP Invitations
/vppinvitations/id/{id} DELETE Delete - VPP Invitations
/webhooks GET Read - Webhooks
/webhooks/id/{id} GET Read - Webhooks
/webhooks/id/{id} POST Create - Webhooks
/webhooks/id/{id} PUT Update - Webhooks
/webhooks/id/{id} DELETE Delete - Webhooks