Skip to main content
Jamf Nation, hosted by Jamf, is the largest Apple IT management community in the world. Dialog with your fellow IT professionals, gain insight about Apple device deployments, share best practices and bounce ideas off each other. Join the conversation.

Migrating Users

Overview

If you have upgraded from Jamf Pro 9.2x or earlier and want to integrate with VPP and utilize the Users tab, you must first complete the user migration process. This creates user inventory from the existing user information in computer and mobile device inventory.

The Migration Assistant in Jamf Pro identifies conflicts that must be resolved before migrating users and provides you with quick, easy methods for resolving those conflicts. There are two main types of conflicts that must be resolved before migrating users:

  • The same username exists in multiple places in computer and mobile device inventory, and the information associated with the username (e.g., email address and phone number) is inconsistent. The Migration Assistant allows you to resolve all conflicts of this type using LDAP information and/or the latest information in Jamf Pro.
  • User information in the inventory for a computer or mobile device includes an email address but no username. The Migration Assistant allows you to resolve all conflicts of this type by using the email addresses as usernames.

For both conflict types, you can also leave the assistant and resolve individual conflicts by manually changing user information in computer and mobile device inventory.

Requirements

To migrate users, you need a Jamf Pro user account with the administrator privilege set and full Jamf Pro access.

Procedure

  1. Log in to Jamf Pro.
  2. Click the Users tab at the top of the page.
  3. Click Migrate Users. Jamf Pro loads user information from computer and mobile device inventory, and then a list of users is displayed. All conflicts are displayed in red. Users with email addresses but no username are displayed as "No Name".
  4. Resolve conflicts using the buttons on the page, or by leaving the assistant and manually changing user information in computer and mobile device inventory. When you resolve conflicts using the buttons on the page, user information in computer and mobile device inventory is automatically modified appropriately.
  5. After all conflicts have been resolved, click Migrate. Note: The Migrate button is not displayed until all conflicts have been resolved.Jamf Pro creates user inventory from the existing user information in computer and mobile device inventory.

After user migration is complete, you can add one or more VPP accounts to Jamf Pro and begin utilizing the Users tab.

Like Comment
Order by:
SOLVED Posted: by matt.jamison

I get an HTTP 401 Error and a nice Access Denied on the page when I click on Users.

Like
SOLVED Posted: by merc_support

Not sure about your HTTP401, but if you're receiving the Access Denied message I did, it's because you need to turn on the privileges for your account \- in System Settings > JSS User Accounts & Groups. Most (if not all) of the new features won't be available until you do.

Like
SOLVED Posted: by dpenny

I'm logged in as a full administrative user, but I do not have a Migrate Users link appearing under the Users tab. Is there a way to "re-enable" the Migration Assistant?

Like
SOLVED Posted: by thedanielmatt

I'm not 100% sure on this yet, but I believe you need to have your Volume Purchase Program(VPP)/Device Enrollment Program (DEP) configured in the JSS for you to be "Authorized". Do you have VPP or DEP configured in your JSS?

Like
SOLVED Posted: by dpenny

I had not initially setup VPP and DEP in the JSS. However, I have completed the setup of both parts and there is still no Migration Assistant link visible.

Like
SOLVED Posted: by ifbell

So I ran the Migration utility, and it says I have no users. Does this only work with LDAP users and not local users?

Like
SOLVED Posted: by ifbell

Duplicate post

Like
SOLVED Posted: by pwskura

Can I get clarification about the requirements? This KB says the user executing this migration needs "the administrator privilege set and full JSS access". What is exact difference between custom privilege set and all checkboxes on and administrator privilege set and all check boxes on? This is the first process I have run into that the former case has not been able to execute a function in the JSS. (I think the custom state is the result of upgrading from 8, but I never investigated it.)

Thanks!

Like
SOLVED Posted: by drstumiller

Getting the following error, but no conflicts exist.

No name user contains user information and cannot be migrated

Like
SOLVED Posted: by jonsm

I am getting the same error as drstumiller

Like
SOLVED Posted: by tadholyfamily

I got that, so I added unique usernames to all of the devices in the inventory. That stops the error in the most manual way possible, but it works.

Like
SOLVED Posted: by jonsm

That quite doesn't work when I have over 3500 devices.

Like
SOLVED Posted: by Bedfords

I go to Migrate Users and nothing shows up.

Like
SOLVED Posted: by ttyler

I think you will find that you need to have machines assigned to users before their name appears under the list.

Like