jamf_Account

Represents an enabled Jamf Pro local or directory account. Accounts are identity principals that hold permissions and can perform actions within the Jamf Pro environment.

Represents an enabled Jamf Pro local or directory account. Accounts are the primary identity principals that hold permissions and can perform actions within the Jamf Pro environment.

Created by

process_account_nodes in lib/preprocess.py

Edges

The tables below list edges defined by the Jamf extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
jamf_Contains	jamf_Tenant, jamf_Site	✅
jamf_MatchedEmail	jamf_ComputerUser	✅
jamf_MatchedName	jamf_ComputerUser	✅
jamf_SSO_Login	jamf_SSOIntegration	✅
jamf_Update_SSO_Settings	jamf_Account, jamf_DisabledAccount, jamf_Group, jamf_ApiClient, jamf_DisabledApiClient	✅

Outbound Edges

Edge Type	Destination Node Types	Traversable
jamf_AdminTo	jamf_Tenant	✅
jamf_AdminToSite	jamf_Site	✅
jamf_AZMatchedEmail	AZUser	❌
jamf_Create_API_Client_and_Assign_Role	jamf_Tenant	✅
jamf_Create_API_Client_and_Create_Role	jamf_Tenant	✅
jamf_Create_API_Client_and_Update_Role	jamf_Tenant	✅
jamf_CreateAccounts	jamf_Tenant	✅
jamf_CreateAPIRoles	jamf_Tenant	❌
jamf_CreateComputerExtensions	jamf_Computer	✅
jamf_CreatePolicies	jamf_Computer	✅
jamf_MemberOf	jamf_Group	✅
jamf_ScriptsNonTraversable	jamf_Tenant	❌
jamf_Update_API_Client_and_Assign_Role	jamf_Tenant	❌
jamf_Update_API_Client_and_Create_Roles	jamf_Tenant	❌
jamf_Update_API_Client_and_Update_Roles	jamf_Tenant	❌
jamf_Update_Recurring_Scripts	jamf_Computer	✅
jamf_Update_SSO_Settings	jamf_SSOIntegration, jamf_Account, jamf_DisabledAccount, jamf_Group	✅
jamf_UpdateAccounts	jamf_Tenant	✅
jamf_UpdateAPIRoles	jamf_Tenant	❌
jamf_UpdateComputerExtensions	jamf_Computer	✅
jamf_UpdatePolicies	jamf_Computer	✅

Properties

Property Name	Data Type	Description
displayname	string	Full name of the account holder
privilegeSet	string	Privilege set assigned (Administrator, Custom, etc.)
objectid	string	Unique identifier for the Account
name	string	Username of the account
email	string	Email address associated with the account
siteID	integer	ID of the site the account is assigned to
accessLevel	string	Access level (Full Access, Site Access, Group Access)
enabled	string	Whether the account is enabled
Tier	integer	Security tier classification (0 for administrators)
localAccount	boolean	Whether this is a local Jamf account (not directory)
privilegesJSSObjects	string[]	JSS Object permissions granted to the account
privilegesJSSActions	string[]	JSS Action permissions granted
privilegesJSSOSettings	string[]	JSS Settings permissions granted
Groups	integer	Group assignment indicator

Relationship Diagram

Note: Some non-traversable edges have been omitted for clarity. The diagram shows all traversable edges and structurally important non-traversable edges. Omitted edges include: jamf_Update_API_Client_and_Update_Roles, jamf_Update_API_Client_and_Create_Roles, jamf_Update_API_Client_and_Assign_Role, jamf_CreateAPIRoles, and jamf_UpdateAPIRoles.