jamfprivileges

Documentation

Overview

common/jamfprivileges/validate.go This package contains shared / common resource functions

common/jamfprivileges/validprivileges.go This package contains shared / common resource variables

Index

• Variables
• func ValidateCasperAdminPrivileges(val interface{}, key string) (warns []string, errs []error)
• func ValidateJSSActionsPrivileges(val interface{}, key string) (warns []string, errs []error)
• func ValidateJSSObjectsPrivileges(val interface{}, key string) (warns []string, errs []error)
• func ValidateJSSSettingsPrivileges(val interface{}, key string) (warns []string, errs []error)

Variables

var ValidCasperAdminPrivileges = []string{
	"Use Casper Admin",
	"Save With Casper Admin",
}

ValidJSSSettingsPrivileges contains a list of all valid values for JSS Actions Priviledges field. Used by accounts and account groups. Privileges are reflectively of jamf pro up to version 11.3.0

var ValidJSSActionsPrivileges = []string{
	"Allow User to Enroll",
	"Assign Users to Computers",
	"Assign Users to Mobile Devices",
	"Change Password",
	"Delete Return To Service Configurations",
	"Dismiss Notifications",
	"Edit Return To Service Configurations",
	"Enroll Computers",
	"Enroll Mobile Devices",
	"Flush MDM Commands",
	"Flush Policy Logs",
	"Jamf Packages Action",
	"Remove Jamf Parent management capabilities",
	"Remove restrictions set by Jamf Parent",
	"CLEAR_TEACHER_PROFILE_PRIVILEGE",
	"Renewal of the Built-in Certificate Authority",
	"Jamf Connect Deployment Retry",
	"Jamf Protect Deployment Retry",
	"Send Application Attributes Command",
	"Send Blank Pushes to Mobile Devices",
	"Send Command to Renew MDM Profile",
	"Send Computer Bluetooth Command",
	"Send Computer Delete User Account Command",
	"Send Computer Remote Command to Download and Install OS X Update",
	"Send Computer Remote Command to Install Package",
	"Send Computer Remote Desktop Command",
	"Send Computer Remote Lock Command",
	"Send Computer Remote Wipe Command",
	"Send Computer Set Activation Lock Command",
	"Send Computer Unlock User Account Command",
	"Send Computer Unmanage Command",
	"Send Declarative Management Command",
	"Send Disable Bootstrap Token Command",
	"Send Email to End Users via JSS",
	"Send Enable Bootstrap Token Command",
	"Send Inventory Requests to Mobile Devices",
	"Send Local Admin Password Command",
	"Send MDM Check In Command",
	"Send Messages to Self Service Mobile",
	"Send Mobile Device Bluetooth Command",
	"Send Mobile Device Diagnostics and Usage Reporting and App Analytics Commands",
	"Send Mobile Device Disable Data Roaming Command",
	"Send Mobile Device Disable Voice Roaming Command",
	"Send Mobile Device Enable Data Roaming Command",
	"Send Mobile Device Enable Voice Roaming Command",
	"Send Mobile Device Lost Mode Command",
	"Send Mobile Device Managed Settings Command",
	"Send Mobile Device Mirroring Command",
	"Send Mobile Device Personal Hotspot Command",
	"Send Mobile Device Refresh Cellular Plans Command",
	"Send Mobile Device Remote Command to Download and Install iOS Update",
	"Send Mobile Device Remote Lock Command",
	"Send Mobile Device Remote Wipe Command",
	"Send Mobile Device Remove Passcode Command",
	"Send Mobile Device Remove Restrictions Password Command",
	"Send Mobile Device Restart Device Command",
	"Send Mobile Device Set Activation Lock Command",
	"Send Mobile Device Set Device Name Command",
	"Send Mobile Device Set Wallpaper Command",
	"Send Mobile Device Shared Device Configuration Commands",
	"Send Mobile Device Shared iPad Commands",
	"Send Mobile Device Shut Down Command",
	"Send Mobile Device Software Update Recommendation Cadence Command",
	"Send Set Recovery Lock Command",
	"Send Set Timezone Command",
	"Send Software Update Settings Command",
	"Send Update Passcode Lock Grace Period Command",
	"Start Remote Assist Session",
	"Unmanage Mobile Devices",
	"Update Local Admin Password Settings",
	"View Activation Lock Bypass Code",
	"View Disk Encryption Recovery Key",
	"View Event Logs",
	"View JSS Information",
	"View License Serial Numbers",
	"View Local Admin Password",
	"View Local Admin Password Audit History",
	"View MDM command information in Jamf Pro API",
	"View Mobile Device Lost Mode Location",
	"View Recovery Lock",
	"View Return To Service Configurations",
}

ValidJSSSettingsPrivileges contains a list of all valid values for JSS Actions Priviledges field. Used by accounts and account groups. Privileges are reflectively of jamf pro up to version 11.3.0

var ValidJSSObjectsPrivileges = []string{}/* 338 elements not displayed */

ValidJSSObjectsPrivileges contains a list of all valid values for JSS Object Priviledges field. Used by accounts and account groups. Privileges are reflectively of jamf pro up to version 11.3.0

var ValidJSSSettingsPrivileges = []string{
	"Read Activation Code",
	"Update Activation Code",
	"Read Apache Tomcat Settings",
	"Update Apache Tomcat Settings",
	"Read Apple Configurator Enrollment",
	"Update Apple Configurator Enrollment",
	"Read Education Settings",
	"Update Education Settings",
	"Read Mobile Device App Maintenance Settings",
	"Update Mobile Device App Maintenance Settings",
	"Read Automatic Mac App Updates Settings",
	"Update Automatic Mac App Updates Settings",
	"Read Automatically Renew MDM Profile Settings",
	"Update Automatically Renew MDM Profile Settings",
	"Read Cache",
	"Update Cache",
	"Read Change Management",
	"Update Change Management",
	"Read Computer Check-In",
	"Update Computer Check-In",
	"Read Cloud Distribution Point",
	"Update Cloud Distribution Point",
	"Read Cloud Services Settings",
	"Update Cloud Services Settings",
	"Read Clustering",
	"Update Clustering",
	"Read Computer Check-In",
	"Update Computer Check-In",
	"Read Computer Inventory Collection",
	"Update Computer Inventory Collection",
	"Read Computer Inventory Collection Settings",
	"Update Computer Inventory Collection Settings",
	"Read Conditional Access",
	"Update Conditional Access",
	"Read Customer Experience Metrics",
	"Update Customer Experience Metrics",
	"Read Device Compliance Information",
	"Read Mobile Device Inventory Collection",
	"Update Mobile Device Inventory Collection",
	"Read Engage Settings",
	"Update Engage Settings",
	"Read GSX Connection",
	"Update GSX Connection",
	"Read Patch Internal Source",
	"Read Jamf Connect Settings",
	"Update Jamf Connect Settings",
	"Read Parent App Settings",
	"Update Parent App Settings",
	"Read Jamf Protect Settings",
	"Update Jamf Protect Settings",
	"Read JSS URL",
	"Update JSS URL",
	"Read Teacher App Settings",
	"Update Teacher App Settings",
	"Read Limited Access Settings",
	"Update Limited Access Settings",
	"Read Retention Policy",
	"Update Retention Policy",
	"Read Onboarding Configuration",
	"Update Onboarding Configuration",
	"Read Password Policy",
	"Update Password Policy",
	"Read Patch Management Settings",
	"Update Patch Management Settings",
	"Read PKI",
	"Update PKI",
	"Read Re-enrollment",
	"Update Re-enrollment",
	"Read Computer Security",
	"Update Computer Security",
	"Read App Request Settings",
	"Update App Request Settings",
	"Read Mobile Device Self Service",
	"Update Mobile Device Self Service",
	"Read Self Service",
	"Update Self Service",
	"Read SMTP Server",
	"Update SMTP Server",
	"Read SSO Settings",
	"Update SSO Settings",
	"Read User-Initiated Enrollment",
	"Update User-Initiated Enrollment",
}

ValidJSSSettingsPrivileges contains a list of all valid values for JSS Settings Priviledges field. Used by accounts and account groups. Privileges are reflectively of jamf pro up to version 11.3.0

Functions

func ValidateCasperAdminPrivileges

func ValidateCasperAdminPrivileges(val interface{}, key string) (warns []string, errs []error)

ValidateCasperAdminPrivileges checks if each value in the casper_admin_privileges field matches a value from a predefined list of valid Casper Admin Privileges.

func ValidateJSSActionsPrivileges

func ValidateJSSActionsPrivileges(val interface{}, key string) (warns []string, errs []error)

ValidateJSSActionsPrivileges checks if each value in the jss_actions_privileges field matches a value from a predefined list of valid JSS Actions Privileges.

func ValidateJSSObjectsPrivileges

func ValidateJSSObjectsPrivileges(val interface{}, key string) (warns []string, errs []error)

ValidateJSSObjectsPrivileges ensures that each privilege in the list is valid.

func ValidateJSSSettingsPrivileges

func ValidateJSSSettingsPrivileges(val interface{}, key string) (warns []string, errs []error)

ValidateJSSSettingsPrivileges checks if each value in the jss_settings_privileges field matches a value from a predefined list of valid JSS Setting Privileges.