Policy Scope

Policy Scope

Pick a Mac and see every policy scoped to it, and how. Read-only.

How to use it

1. Connect to Jamf Pro and click Connect & Check Permissions. The tool checks Read Computers and Read Policies. Then click Continue → (or Proceed Anyway →).
2. Under Search for a device, enter a device name and click Search, then pick the Mac.
3. The tool reads the Mac's computer group memberships, then checks the scope of every policy.

Results

The Mac's groups are listed at the top. Each matching policy shows its name, category, trigger, execution frequency and whether it's enabled, plus how it reaches the Mac:

Scope	Meaning
All Computers	The policy is scoped to all computers
Direct	The Mac is in the policy's scope by name
Group	The Mac is in a computer group the policy is scoped to. Via: lists the groups

Filter the list with All, Direct or Group. If nothing matches, you see No scoped policies found.

New Search looks up another Mac, and Reset goes back to the start.

What isn't checked

Policy Scope looks at the targets of each policy only:

• Exclusions aren't taken into account, so a policy can be listed even though the Mac is excluded.
• Limitations (users, user groups, network segments, iBeacons) and building and department targets aren't checked.
• Disabled policies are listed too, marked as disabled.

For a full picture of why a Mac does or doesn't get a policy, compare it with another Mac in Compare, which does take exclusions and limitations into account.

Export

Export HTML saves PolicyScope_<server>.html with the device, its groups and the matching policies.

Permissions: Read Computers, Read Policies.