You can display custom messages about the policies running on end users' computers and give them the option to defer running the policy if needed. This functionality is enabled by the Jamf Helper, a utility which is automatically installed on all managed computers. You can configure user interaction through the User Interaction tab of a policy in Jamf Pro or call it manually via a script. Messages can be displayed to users before or after a policy runs.
When allowing users to defer a policy, you can specify a date and time, or number of days after the user is first prompted by the policy to prohibit further deferral (called the “deferral limit”). This allows you to give users more control over when the policy runs while ensuring that the policy eventually runs.
Before a policy runs on a computer, the user is prompted to choose to have the policy run immediately or to defer the policy for one of the following:
1 hour
2 hours
4 hours
1 day
The amount of time until the deferral limit is reached
If the user chooses to defer the policy, they are prompted with the original message after the chosen amount of time. When the deferral limit is reached, a message is displayed to notify the user, and the policy runs immediately.
To avoid policy deferment issues and excessive re-runs, the deferment must not exceed the execution frequency configured for the policy.
When a policy fails and is made available in Self Service with an execution frequency of "Once per computer" and is configured to automatically retry, the policy will still display in Self Service so users can retry it. If the user does not re-run the policy using Self Service, the jamf binary will automatically re-run it on the next configured trigger.