An administrator role can be set up to define a set of access rights that an administrator has within Jamf School. Any administrator assigned to a role is granted all of the access rights defined for that role. Only administrator accounts can be assigned to an administrator role, and an administrator account may be assigned to more than one administrator role.
When creating an administrator role, it is important to select only the access rights needed by an administrator to accomplish the specific responsibilities they’ve been assigned. Later, if the selection of access rights are updated within a role, those changes will be conveyed to any administrator accounts assigned to the role.
Note: Administrator accounts exist separately from user accounts within Jamf School, and user accounts cannot be assigned to an administrator role.
Setting Up an Administrator Role
Different roles can be created to encompass a variety of administrator types and responsibilities, such as content manager, device manager, help desk technician, etc. Before setting up an administrator role, determine the specific functions and responsibilities the role should have—this will inform which access rights are chosen for that role during the setup process.
When naming the role, be sure to choose a name that is descriptive of the role’s responsibilities. That way it can be easily recognized later when assigning accounts to that role.
In Jamf School, navigate to Organization > Administrators > Roles > +Create role.
In the window that opens, enter the name of the role as well as an optional description. Click the Share with Locations checkbox if this could be used a location-specific role. Leaving the box unchecked limits the role to be assigned only to the top level. Then click Create.
Click Access rights under the Role heading. In the Access Rights menu that appears, select all of the functions that someone assuming the role needs the ability to do. For any broad category (such as Global or Devices) that contains selections, the top-level checkbox in the Read column must also be selected. If that checkbox is not selected, the resulting left-sidebar menu choice will not function properly for any account holder assigned to the role.
Note: The broad categories under Access Rights are directly related to the left sidebar menu of the Jamf School Management System screen. Which access rights are granted to a role affect which menu choices are visible to an account holder assigned to the role.
Once all selections are made, scroll to the bottom of the screen and click Save. Now, clicking Roles will show a list of all roles that have been created.
Assigning Administrator Accounts
In Jamf School, navigate to Organization > Administrators > Overview > +Add Administrator.
In the window that opens, enter the administrator’s email address, first name, and last name. Select the location from the Locations menu and the assigned role from the Role menu.
The administrator will receive an email inviting them to log in to Jamf School Management System with their new administrator login information.
Assigning Multiple Roles for One Administrator
You can assign individual administrators the same roles in different locations or different roles in the same locations depending on what works best in your organization. To set up either option, click +Add Administrator.
Testing for Integrity
Make sure to test all roles to ensure the account holders will have the correct privileges to accomplish all of their responsibilities. A dummy account may be set up for testing purposes.