User Guide

How to create a Jamf segment

Preview

Create a Jamf segment to discover Apple devices managed through Jamf Pro and audit the ones you want to track in Inventory. By default, scans and audits for the segment run on AlloyScan cloud workers, services hosted and managed by AlloyScan. You do not need to install or maintain any local components.

NOTE: With the default cloud worker, Jamf credentials are encrypted and stored in the AlloyScan cloud. If you want to keep them within your local network, you can use a local Audit Service instead. A local Audit Service is also required if your Jamf Pro endpoint is private. This can be a service you already use for other segments.

Prerequisites

  • Site Administrator role.
  • For cloud execution, a public HTTPS Jamf Pro endpoint.
  • For local execution, an Audit Service that can reach Jamf Pro.
  • A Jamf account with read access to the inventory you want to collect.

Create the segment

  1. Open Network > Segments and select + New segment.
  2. Select Jamf and select Next.
  3. Under Execution placement, keep AlloyScan cloud worker, which is selected by default. To run scans and audits in your environment, select Local Audit service and choose an Audit Service.
  4. Review the segment name and change it if needed. For cloud execution, enter the public HTTPS Jamf Pro base URL. Select one or more resources to scan: Mac, iPhone / iPad, and Other Apple devices.
  5. Select or add credentials for the provider. Cloud execution uses cloud credentials stored in AlloyScan; local execution uses credentials from the selected Audit Service. Jamf cloud credentials contain User and Password; the local credential also includes the server URL. Set Page size (1–500, default 100) if needed.
  6. Create a scan schedule, or continue without a schedule. For cloud execution, Cloud start window (minutes) specifies how long after the scheduled time the scan may start.
  7. Review the settings and create the segment.

Use a cloud worker for an existing segment

Open the segment's settings, select AlloyScan cloud worker under Execution placement, select or add compatible cloud credentials, and save. Existing Audit Service credentials are not transferred to cloud storage. You can continue using local execution without changing the segment's credentials.

Verify

After saving, the new segment appears in Network > Segments with the Jamf type icon.

  1. Open the segment.
  2. For local execution, use Test connection after saving the segment to verify access to Jamf Pro.
  3. Click Scan to discover Jamf-managed Apple devices.
  4. Review the Scan Results grid. Select the devices marked Ready for audit, then click Audit.
  5. Open Inventory and review the Apple device records created from the Jamf audit.