General Requirements for LAPS - Technical Paper: Local Administrator Password Solution for Jamf Pro

Technical Paper: Local Administrator Password Solution for Jamf Pro
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

  • Jamf management framework LAPS

    • Jamf Pro 10.49.0 or later

    • A Jamf managed local administrator account on computers enrolled via either Automated Device Enrollment or user-initiated enrollment

  • MDM LAPS

    • Jamf Pro 10.46.0 or later to use the Jamf Pro API

      For more information about the Jamf Pro API, see Jamf Pro API Overview in the Jamf Developer Portal.

    • Jamf Pro 11.5.0 or later to use the Jamf Pro interface

    • A managed local administrator account on computers enrolled via Automated Device Enrollment

  • Computers with macOS 11 or later enrolled with Jamf Pro

  • A Jamf Pro administrator account with the following privileges for each endpoint:

    Jamf Pro Privilege

    Endpoint

    Send Local Admin Password Command{{jps_url}}/api/v2/local-admin-password/{{management_id}}/set-password
    Update Local Admin Password Settings{{jps_url}}/uapi/v2/local-admin-password/settings
    View Local Admin Password

    {{jps_url}}/api/v2/local-admin-password/{{management_id}}/accounts

    {{jps_url}}/api/v2/local-admin-password/{{management_id}}/account/{{username}}/password

    {{jps_url}}/api/v2/local-admin-password/pending-rotations

    View Local Admin Password Audit History

    {{jps_url}}/api/v2/local-admin-password/{{management_id}}/account/{{username}}/audit

    {{jps_url}}/api/v2/local-admin-password/{{management_id}}/account/{{username}}/history