Skip to main content
Jamf Nation, hosted by Jamf, is a knowledgeable community of Apple-focused admins and Jamf users. If you like what you see, join us in person at the ninth annual Jamf Nation User Conference (JNUC) this October for three days of learning, laughter and IT love.

Migrating Users

Important: In an upcoming release of Jamf Pro, workflows will no longer support user information that has not been migrated.

Overview

If you have upgraded from Jamf Pro 9.2x or earlier, you must complete the user migration process to activate the Users tab in Jamf Pro. The user migration process creates user inventory from the existing user information in computer and mobile device inventory.

A Migration Assistant is provided in Jamf Pro to help you identify conflicts that must be resolved before migrating users. There are two main types of conflicts that must be resolved before migrating users:

  • The same username exists in multiple places in computer and mobile device inventory, and the information associated with the username (e.g., email address and phone number) is inconsistent. The Migration Assistant allows you to resolve all conflicts of this type using LDAP information and/or the latest information in Jamf Pro.
  • User information in the inventory for a computer or mobile device includes an email address but no username. The Migration Assistant allows you to resolve all conflicts of this type by using the email addresses as usernames.

For both conflict types, you can also leave the assistant and resolve individual conflicts by manually changing user information in computer and mobile device inventory.

Requirements

To migrate users, you need a Jamf Pro user account with the administrator privilege set and full Jamf Pro access.

Note: If you're unable to access the User Migration pane after upgrading following the procedure below, verify that the Jamf Pro user account has full privileges for "Users" in Jamf Pro. (Privileges associated with new features in Jamf Pro are disabled by default when upgrading.) To ensure the user account has the required privileges after upgrading, go to System Settings > Jamf Pro User Accounts & Groups, and click the Jamf Pro user account that will be used to migrate users. On the Privileges tab, ensure that the user has privileges to create, read, update, and delete "Users" in Jamf Pro Server Objects.

Procedure

  1. Log in to Jamf Pro.
  2. Click the Users tab at the top of the page.
  3. Click Migrate Users. Jamf Pro loads user information from computer and mobile device inventory, and then a list of users is displayed. All conflicts are displayed in red. Users with email addresses but no username are displayed as "No Name".
  4. Resolve conflicts using the buttons on the page, or by leaving the assistant and manually changing user information in computer and mobile device inventory. When you resolve conflicts using the buttons on the page, user information in computer and mobile device inventory is automatically modified appropriately.
  5. After all conflicts have been resolved, click Migrate. Note: The Migrate button is not displayed until all conflicts have been resolved.Jamf Pro creates user inventory from the existing user information in computer and mobile device inventory.

After user migration is complete, you can begin utilizing the Users tab.

Like Comment
Order by:
SOLVED Posted: by matt.jamison

I get an HTTP 401 Error and a nice Access Denied on the page when I click on Users.

Like
SOLVED Posted: by merc_support

Not sure about your HTTP401, but if you're receiving the Access Denied message I did, it's because you need to turn on the privileges for your account \- in System Settings > JSS User Accounts & Groups. Most (if not all) of the new features won't be available until you do.

Like
SOLVED Posted: by dpenny

I'm logged in as a full administrative user, but I do not have a Migrate Users link appearing under the Users tab. Is there a way to "re-enable" the Migration Assistant?

Like
SOLVED Posted: by thedanielmatt

I'm not 100% sure on this yet, but I believe you need to have your Volume Purchase Program(VPP)/Device Enrollment Program (DEP) configured in the JSS for you to be "Authorized". Do you have VPP or DEP configured in your JSS?

Like
SOLVED Posted: by dpenny

I had not initially setup VPP and DEP in the JSS. However, I have completed the setup of both parts and there is still no Migration Assistant link visible.

Like
SOLVED Posted: by ifbell

So I ran the Migration utility, and it says I have no users. Does this only work with LDAP users and not local users?

Like
SOLVED Posted: by ifbell

Duplicate post

Like
SOLVED Posted: by pwskura

Can I get clarification about the requirements? This KB says the user executing this migration needs "the administrator privilege set and full JSS access". What is exact difference between custom privilege set and all checkboxes on and administrator privilege set and all check boxes on? This is the first process I have run into that the former case has not been able to execute a function in the JSS. (I think the custom state is the result of upgrading from 8, but I never investigated it.)

Thanks!

Like
SOLVED Posted: by drstumiller

Getting the following error, but no conflicts exist.

No name user contains user information and cannot be migrated

Like
SOLVED Posted: by jonsm

I am getting the same error as drstumiller

Like
SOLVED Posted: by tadholyfamily

I got that, so I added unique usernames to all of the devices in the inventory. That stops the error in the most manual way possible, but it works.

Like
SOLVED Posted: by jonsm

That quite doesn't work when I have over 3500 devices.

Like
SOLVED Posted: by Bedfords

I go to Migrate Users and nothing shows up.

Like
SOLVED Posted: by ttyler

I think you will find that you need to have machines assigned to users before their name appears under the list.

Like