> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Jamf Protect

AccessOwl integrates with Jamf Protect to provision and deprovision user access in your Jamf Protect tenant.

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl creates user accounts with the specified roles/permissions during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl removes users from your Jamf Protect tenant during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* **Full Admin** access to your Jamf Protect tenant, so you can add the integration account.

## Setup

<Steps>
  <Step title="Add Jamf Protect in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Invite the integration account as Full Admin">
    AccessOwl shows you the integration account's email address. In Jamf Protect:

    * Click **Administrative** > **Account**.
    * Click the **Users** tab.
    * Click **Create User**.
    * In the **Email** field, enter the integration account's email address.
    * From the **Identity Provider** menu, choose your organization's identity provider, or **Jamf ID** if your tenant is not integrated with one.
    * From the **Roles** menu, choose **Full Admin**.
    * Click **Save**.

    <Note>
      The integration account needs the Full Admin role because it can read and write all data and settings in Jamf Protect, including users. The Read Only role cannot create or edit settings.
    </Note>
  </Step>
</Steps>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.