Skip to main content
Requires Jamf Pro 10.49.0 or later. You must be a Jamf Pro administrator of the tenant.

​
Create an API Role

An API Role groups one or more Jamf Pro privileges (e.g. “Read Computers”, “Update Mobile Devices”) that the API Client will be allowed to exercise. You can also reuse an existing role.

1

Sign in to your Jamf Pro web console

Sign in as a Jamf Pro administrator at https://<your-tenant>.jamfcloud.com (Jamf Cloud) or your self-hosted Jamf Pro URL.

2

Navigate to API Roles

Go to Settings > System > API Roles and Clients and click the API Roles tab.

3

Create the role

Click + New, enter a Display Name (e.g. StackOne Integration), then select the Jamf Pro privileges that StackOne should be allowed to use. Common privileges:

  • Read Computers, Create Computers, Update Computers, Delete Computers
  • Read Mobile Devices, Update Mobile Devices, Send Mobile Device Mobile Device Wipe Command
  • Read Smart Computer Groups, Create Smart Computer Groups, Update Smart Computer Groups, Delete Smart Computer Groups
  • Read Static Computer Groups, Create Static Computer Groups, Update Static Computer Groups, Delete Static Computer Groups
  • Read Users, Create Users, Update Users, Delete Users
  • Read Scripts, Create Scripts, Update Scripts, Delete Scripts
  • Read Categories, Create Categories, Update Categories, Delete Categories
  • Read Buildings, Create Buildings, Update Buildings, Delete Buildings
  • Read Departments, Create Departments, Update Departments, Delete Departments
  • Send Computer Remote Command, Send Mobile Device Remote Command
  • Read Policies, Create Policies, Update Policies, Delete Policies
  • Read macOS Configuration Profiles, Read Mobile Device Configuration Profiles
4

Save the role

Click Save. The role is now available to be assigned to API Clients.

​
Create an API Client

An API Client is the credential that StackOne will use to obtain access tokens.

1

Switch to API Clients tab

From Settings > System > API Roles and Clients, click the API Clients tab.

2

Create the client

Click + New and configure:

  • Display Name: StackOne (or similar identifying name)
  • API Roles: assign the role you created in the previous section
  • Access Token Lifetime: number of seconds tokens should be valid for (default 1800 — 30 minutes — is recommended for security)
  • Enabled: ON
3

Save and capture Client ID

Click Save. The Client ID (a UUID) is shown — copy it.

4

Generate Client Secret

Click Generate Client Secret. The secret is shown only once — copy it immediately and store it securely. If you lose it you must regenerate (and update StackOne).

​
Enter credentials in StackOne

Provide the tenant URL, Client ID, and Client Secret to StackOne to complete the connection.

1

Enter the Jamf Pro URL

The full base URL of your Jamf Pro instance — e.g. https://acme.jamfcloud.com (Jamf Cloud) or https://jamf.example.com:8443 (self-hosted). No trailing slash.

2

Enter the Client ID

Paste the Client ID from your API Client.

3

Enter the Client Secret

Paste the Client Secret.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Jamf Pro URL
  • Client ID
  • Client Secret
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.