Capabilities
Provisioning
AccessOwl creates user accounts with the specified roles/permissions during access requests.
Deprovisioning
AccessOwl deletes user accounts in Jamf Pro during access revocations.
Prerequisites
- A Jamf Pro user account with the Administrator privilege set, so you can add the integration account.
Setup
1
Add Jamf Pro in AccessOwl
Either add a new application or open Applications and click the +-symbol, then continue.
2
Invite the integration account as Administrator
AccessOwl shows you the integration account’s email address. In Jamf Pro:
- Click Settings in the sidebar.
- In the System section, click User accounts & groups.
- Click New.
- Select Create Federated Account if you sign in to Jamf Pro with SSO through Jamf Account, otherwise select Create Standard Account, and click Next.
- On the Account pane, enter the integration account’s email address.
- Choose Full Access from the Access Level pop-up menu and Administrator from the Privilege Set pop-up menu.
- Click Save.
The integration account needs the Administrator privilege set because it grants all privileges in Jamf Pro, including creating and deleting Jamf Pro user accounts. The Auditor privilege set only grants read privileges. A federated account must use the same email address as in your Jamf Account settings.