Granting Read-Only Access to the JAMF Software Server MySQL Database

Updated: 01 July 2021

Product: Jamf Pro

This article describes how to grant read-only access to the Jamf Pro MySQL database to perform database queries. If you need to perform direct queries of the Jamf Pro MySQL database (for example, from an organization's inventory, asset tracking, or help desk system), you should create and use a MySQL account with read-only privileges. You can do this in one of two ways:

Using MySQL Workbench, available at: https://dev.mysql.com/downloads/workbench/
From the command line

Note:

If you have specific questions about performing queries on the Jamf Pro MySQL database, contact Jamf Support.

Open a command terminal on the host server of MySQL
Connect to the MySQL prompt using the MySQL root user credentials by executing the following command:
```
mysql -u root -p
```
When prompted, enter the root user password.
Grant read-only access to the database by executing the following commands:
```
CREATE USER 'username'@'ip_address' IDENTIFIED BY 'password';
GRANT SELECT ON database_name.* TO 'username'@'ip_address';
```
Substitute your information in the commands above for the following placeholders:
- username
- ip_address—the IP address of the system from which the connection will be made (can be localhost if MySQL is on the same system)
- password
- database_name—the name of the Jamf Pro database