schema

Jamf Schema

graph LR
    JamfComputer -- MEMBER_OF --> JamfComputerGroup
    JamfMobileDevice -- MEMBER_OF --> JamfMobileDeviceGroup
    JamfTenant -- RESOURCE --> JamfComputer
    JamfTenant -- RESOURCE --> JamfComputerGroup
    JamfTenant -- RESOURCE --> JamfMobileDevice
    JamfTenant -- RESOURCE --> JamfMobileDeviceGroup

JamfComputer

A macOS computer inventory record managed by Jamf.

Ontology Projection: JamfComputer contributes data to canonical Device nodes.

Properties

Field Index Description
id Yes Jamf computer inventory ID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
activation_lock_enabled Whether Activation Lock is enabled.
bootstrap_token_escrowed_status Bootstrap token escrow state.
declarative_device_management_enabled Whether declarative device management is enabled.
email Associated email address.
enrolled_via_automated_device_enrollment Whether automated device enrollment was used.
filevault_enabled Whether FileVault is enabled.
firewall_enabled Whether the firewall is enabled.
gatekeeper_status Gatekeeper status.
last_contact_time Last Jamf contact timestamp.
model Device model.
model_identifier Device model identifier.
name Yes Device hostname.
os_build Operating system build.
os_name Operating system family.
os_version Operating system version.
platform Platform reported by Jamf.
recovery_lock_enabled Whether Recovery Lock is enabled.
remote_management_managed Whether remote management is enabled.
report_date Last inventory report timestamp.
secure_boot_level Secure Boot level.
serial_number Yes Device serial number.
sip_status System Integrity Protection status.
site_name Jamf site name.
supervised Whether the device is supervised.
udid Device UDID.
user_approved_mdm Whether mobile device management is user approved.
user_real_name Associated user's real name.
username Associated username.

Relationships

  • (:Device)-[:OBSERVED_AS]->(:JamfComputer)

  • (:JamfComputer)-[:MEMBER_OF]->(:JamfComputerGroup): Links a Jamf computer to a group containing it.

  • (:JamfTenant)-[:RESOURCE]->(:JamfComputer): Links a Jamf tenant to one of its managed computers.

JamfComputerGroup

A group of computers managed by Jamf.

Properties

Field Index Description
id Yes Jamf computer group ID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
description Group description.
is_smart Whether this is a smart group.
membership_count Number of members reported by Jamf.
name Friendly name of the group.

Relationships

  • (:JamfComputer)-[:MEMBER_OF]->(:JamfComputerGroup): Links a Jamf computer to a group containing it.

  • (:JamfTenant)-[:RESOURCE]->(:JamfComputerGroup): Links a Jamf tenant to one of its computer groups.

JamfMobileDevice

A mobile device inventory record managed by Jamf.

Ontology Projection: JamfMobileDevice contributes data to canonical Device nodes.

Properties

Field Index Description
id Yes Jamf mobile device inventory ID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
activation_lock_enabled Whether Activation Lock is enabled.
bootstrap_token_escrowed Whether a bootstrap token is escrowed.
data_protected Whether data protection is enabled.
display_name Yes Device display name.
email Associated email address.
hardware_encryption Whether hardware encryption is enabled.
jailbreak_detected Whether jailbreaking or rooting was detected.
last_enrolled_date Enrollment timestamp.
last_inventory_update_date Last inventory update timestamp.
lost_mode_enabled Whether lost mode is enabled.
managed Whether the device is managed.
model Device model.
model_identifier Device model identifier.
os Normalized operating system family.
os_build Operating system build.
os_version Operating system version.
passcode_compliant Whether the passcode meets policy.
passcode_present Whether a passcode is present.
platform Device type reported by Jamf.
serial_number Yes Device serial number.
supervised Whether the device is supervised.
user_real_name Associated user's real name.
username Associated username.

Relationships

  • (:Device)-[:OBSERVED_AS]->(:JamfMobileDevice)

  • (:JamfMobileDevice)-[:MEMBER_OF]->(:JamfMobileDeviceGroup): Links a Jamf mobile device to a group containing it.

  • (:JamfTenant)-[:RESOURCE]->(:JamfMobileDevice): Links a Jamf tenant to one of its managed mobile devices.

JamfMobileDeviceGroup

A group of mobile devices managed by Jamf.

Properties

Field Index Description
id Yes Jamf mobile device group ID.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.
description Group description.
is_smart Whether this is a smart group.
membership_count Number of members reported by Jamf.
name Friendly name of the group.

Relationships

  • (:JamfMobileDevice)-[:MEMBER_OF]->(:JamfMobileDeviceGroup): Links a Jamf mobile device to a group containing it.

  • (:JamfTenant)-[:RESOURCE]->(:JamfMobileDeviceGroup): Links a Jamf tenant to one of its mobile device groups.

JamfTenant

A Jamf tenant identified by its configured base URI.

Ontology Mapping: This node uses the ontology label Tenant.

Properties

Field Index Description
id Yes Jamf tenant ID represented by the configured base URI.
firstseen Timestamp when a sync job first created this node.
lastupdated Yes Timestamp of the last sync that observed this node.

Relationships

  • (:JamfTenant)-[:RESOURCE]->(:JamfComputer): Links a Jamf tenant to one of its managed computers.

  • (:JamfTenant)-[:RESOURCE]->(:JamfComputerGroup): Links a Jamf tenant to one of its computer groups.

  • (:JamfTenant)-[:RESOURCE]->(:JamfMobileDevice): Links a Jamf tenant to one of its managed mobile devices.

  • (:JamfTenant)-[:RESOURCE]->(:JamfMobileDeviceGroup): Links a Jamf tenant to one of its mobile device groups.