Create

Create

Create Jamf Pro objects from one guided form: categories, policies, configuration profiles, API roles and clients, restricted software, groups, scripts and package records. ✏️ Creates objects in Jamf Pro.

How to use it

1. Connect to Jamf Pro and click Connect →. The tool checks the Create privilege for every object type (see Permissions). Types you can't create are flagged, so you can still go ahead with the ones you can. Then click Continue → (or Proceed Anyway →).
2. Under What would you like to create?, pick an object type. Change takes you back to this list.
3. Fill in the form. The fields for each type are below. Create stays disabled until the required fields are filled in.
4. Click Create. When it's done you see Created Successfully with the object's name and ID. Create Another keeps you connected for the next one, and Start Over goes back to the beginning.

Object types

Type	What you fill in
Category	Name
Policy	Name, category, enabled, packages, scripts, scope and Update Inventory (Recon). See Policies
macOS Config Profile / iOS Config Profile	Name, an optional description, a .mobileconfig file (Choose .mobileconfig…), category and scope (computer or mobile device groups)
API Role	Display name and privileges. Privileges are grouped by area, with Filter privileges…, All, None and Clear All
API Client	Display name, the API role to assign, Enabled, and the access token lifetime: 15 minutes, 30 minutes, 1 hour, 4 hours or 8 hours
Restricted Software	Name, process name, Kill process when found, Delete executable when found, Send notification to user with an optional message, and scope (computer groups)
Computer Smart Group / Mobile Device Smart Group	Name and criteria. Add Criterion adds a row with a criterion, an operator (such as is, is not, like, not like) and a value. Rows after the first are joined with and or or
Computer Static Group / Mobile Device Static Group	Name. The group is created empty: add members in Jamf Pro
Script	Name, category, priority (Before, After or At Reboot), an optional OS requirement and the script contents
Package	Package name, file name (as it is on your distribution point), category, priority (1–20) and Reboot Required. Choose .pkg / .dmg… fills in the file name for you. The file isn't uploaded. Only the package record is created, so upload the file to your distribution point separately

Policies

• Packages and Scripts: pick existing ones from the lists. Packages are set to install, and scripts run After by default.
• New Category and New Script create one on the spot without leaving the form. The New Script window has a Validate button that checks for a missing shebang and unbalanced if/fi and do/done, then Create & Add to Policy.
• Scope: tick All Computers, or choose computer groups (Filter groups… helps with long lists). Leave both empty to create the policy with no scope.
• The policy is created with an Ongoing execution frequency and no event triggers. Add triggers or Self Service in Jamf Pro when you're ready for it to run.

API clients

When an API client is created, the summary shows its Client ID and Client Secret. Click Reveal to see the secret and copy it somewhere safe, such as a password manager. Jamf Pro won't show this secret again: if you lose it, rotate the client secret in Jamf Pro.

Tips

• Created objects only get the scope you set here. Nothing is scoped to All Computers unless you tick it.
• To copy existing objects between servers rather than build new ones, use Clone.
• Profiles you build with the profile builders can be uploaded straight from those tools. Use Create when you already have a .mobileconfig file, or need an iOS profile.

Permissions

Create for each type you use: Categories, Policies, macOS Configuration Profiles, iOS Configuration Profiles, API Roles, API Integrations (for API clients), Restricted Software, Smart Computer Groups, Smart Mobile Device Groups, Static Computer Groups, Static Mobile Device Groups, Scripts and Packages.

The form also reads existing objects to fill its pickers, so add Read for Categories, Packages, Scripts, Smart and Static Computer Groups, Smart and Static Mobile Device Groups and API Roles where you use them.