Adding limitations to the scope of a remote management task allows you to do the following:
- Limit the task to specific users in the target —
For example, if you want a certain application to open at login for specific users regardless of the computer they use, you can use all computers as the target and add specific users as limitations.
- Limit the task to specific network segments in the target —
For example, if you want each computer in a department to install a package but only while on the company’s production network, you can use the department as the target and add a specific network segment as a limitation.
- Limit policies and configuration profiles to devices in the target when the devices are in a specific iBeacon region —
For example, if you want to install a configuration profile on mobile devices when they are in a specific iBeacon region, you can add the iBeacon region as a limitation.
- On each tab, add items as needed:
To add a network segment, click the Network Segments tab, and then click Add for the network segment.
To add a directory service or local user, click the Directory Service/Local Users tab. Then enter the username in the search field and click Add.
To add a directory service user group, click the Directory Service User Groups tab, enter the name of the group in the search field and click Search. Then click Add for the group you want to add.
Important: Jamf Pro does not use a computer's User and Location information to process LDAP limitations. If you add a directory service user or group as a limitation, Jamf Pro will only apply the limitation if the user currently logged into the computer matches the directory service user exactly.