Capabilities
Provisioning
AccessOwl creates user accounts with the specified roles/permissions during access requests.
Deprovisioning
AccessOwl removes users from your Jamf Protect tenant during access revocations.
Prerequisites
- Full Admin access to your Jamf Protect tenant, so you can add the integration account.
Setup
1
Add Jamf Protect in AccessOwl
Either add a new application or open Applications and click the +-symbol, then continue.
2
Invite the integration account as Full Admin
AccessOwl shows you the integration account’s email address. In Jamf Protect:
- Click Administrative > Account.
- Click the Users tab.
- Click Create User.
- In the Email field, enter the integration account’s email address.
- From the Identity Provider menu, choose your organization’s identity provider, or Jamf ID if your tenant is not integrated with one.
- From the Roles menu, choose Full Admin.
- Click Save.
The integration account needs the Full Admin role because it can read and write all data and settings in Jamf Protect, including users. The Read Only role cannot create or edit settings.