Permissions
To connect your Atomicwork and Jamf accounts, you need:
Atomicwork admin access: You need org admin access in Atomicwork.
Jamf Pro access: You need access to a Jamf Pro account with API access.
Jamf Pro API URL and credentials
Setup
Step 1: Create an API role and client for Atomicwork in Jamf
To enable Atomicwork to access the Jamf Pro API, create an API role with the required permissions and generate a client ID and secret.
Refer to Jamf's article on creating API roles and clients for detailed instructions. When creating the API role, select the following permissions under Jamf Pro API role privileges:
Role privilege | Corresponding endpoint | Purpose |
Read Computers | /computers-inventory, /computers-inventory-detail/{id} | Read inventory data for all computers as well as detailed info for a specific computer. |
Read Mobile Devices | /mobile-devices, /mobile-devices/{id} | List mobile devices in inventory and read detailed info for a specific mobile device. |
View MDM command information in Jamf Pro API | /mdm/commands | Execute or view MDM commands such as reset or restarting devices. |
Once you've created the API client, copy the client ID and secret to use in the next step.
Step 2: Connect Jamf with Atomicwork
As an Atomicwork admin, navigate to Settings > App Store > Jamf, and click on Connect.
In the Jamf integration setup page, enter the following details:
Jamf API URL
Client ID
Client Secret
Click on Test to ensure Atomicwork can successfully authenticate with Jamf.
If the authentication is succesful, click on Connect to complete the process.
Note: Manual MDM-Atomicwork attribute mapping is not available for Jamf asset sync. For accounts with configured Jamf mappings, those mappings remain preserved, and additional fields appear alongside existing asset data.
Step 3: Enable asset sync
On the Jamf app page, click Enable against Discover assets to start automatically ingesting Jamf asset data into Atomicwork.
Atomicwork brings in the full set of Jamf attributes exposed to the integration, such as device hardware, OS and compliance state, enrollment status, last check-in, network configuration, installed software, and user assignment.
After the initial sync, Atomicwork will sync asset info from Jamf every 24 hours.