Category Audit

Category Audit

Find categories nothing uses, sites with no computers, and policies with no scope. Read-only.

How to use it

1. Connect to Jamf Pro and click Connect & Check Permissions. The tool checks Read for Categories, Sites, Scripts, Packages, Policies and Computers. Then click Continue → (or Proceed Anyway →) to scan.
2. The tool reads categories and sites, then scripts, packages and macOS and iOS configuration profiles, then each policy's details, then which site every computer is in. A percentage shows how far it's got.

Results

Counts at the top show Unused Categories, Unused Sites and Unscoped Policies. Use the Section picker to switch between them.

Section	What it shows
Categories	Each category with how many policies, scripts, packages, macOS profiles and iOS profiles use it. A category none of them use is marked UNUSED
Sites	Each site with how many computers are in it. A site with no computers is marked UNUSED
Unscoped Policies	Policies with no targets: not All Computers, and no computers, groups, buildings or departments. Each shows its category and whether it's enabled

Unused only (on by default) hides categories and sites that are in use. Type in Filter… to search. New Scan scans again.

Limitations

• On a large server, only the first 500 policies are checked. A banner says so, for example Large instance: only the first 500 of 812 policies were checked. Categories used only by policies after the first 500 can show as unused.
• Categories are only checked against policies, scripts, packages and configuration profiles. A category used by an app, eBook, printer or patch title can still show as UNUSED.
• Sites are only checked against computers. A site used only by mobile devices, users or other objects shows as UNUSED.

To delete unused categories with a backup first, use Unused, which checks more places.

Permissions: Read Categories, Read Sites, Read Scripts, Read Packages, Read Policies, Read Computers. Also Read macOS Configuration Profiles and Read iOS Configuration Profiles, which the permission screen doesn't check: without them, profile use isn't counted.