{"resources":{"iru":{"id":"iru","name":"iru","fields":{"app":{"name":"app","type":"\u001biru.app","title":"Installed application on an Iru-managed device","is_private":true,"provider":"go.mondoo.com/mql/providers/iru","is_implicit_resource":true},"blueprint":{"name":"blueprint","type":"\u001biru.blueprint","title":"Iru blueprint, a bundle of library items assigned to devices","is_private":true,"provider":"go.mondoo.com/mql/providers/iru","is_implicit_resource":true},"blueprints":{"name":"blueprints","type":"\u0019\u001biru.blueprint","title":"List every configuration blueprint defined in the tenant","provider":"go.mondoo.com/mql/providers/iru"},"device":{"name":"device","type":"\u001biru.device","title":"Iru device lookup by ID","desc":"Single device identified by its Iru device ID. The `id` field selects the device, for example `iru.device(id: \"abc123\") { osVersion filevaultEnabled }`. Use `iru.devices` when iterating the full fleet.","provider":"go.mondoo.com/mql/providers/iru","is_implicit_resource":true},"devices":{"name":"devices","type":"\u0019\u001biru.device","title":"List every device enrolled in the Iru tenant","provider":"go.mondoo.com/mql/providers/iru"},"libraryItem":{"name":"libraryItem","type":"\u001biru.libraryItem","title":"Iru library item, a single entry in the Iru policy/app/profile catalog","desc":"One entry in the tenant library catalog. Apps, configuration profiles, custom apps, custom profiles, scripts, MDM restrictions, FileVault, Gatekeeper, and other policy items all live in the same catalog. The `kind` field discriminates the entry type (for example `iru.libraryItems.where(kind == \"script\")`) and `payload` carries the kind-specific configuration: scripts expose `script` / `run_on` / `run_frequency`; App Store apps expose `app_id` / `bundle_id` / `version`; custom profiles expose the profile metadata.","is_private":true,"provider":"go.mondoo.com/mql/providers/iru","is_implicit_resource":true},"libraryItems":{"name":"libraryItems","type":"\u0019\u001biru.libraryItem","title":"List every entry in the library catalog (apps, profiles, scripts, MDM restrictions, …)","provider":"go.mondoo.com/mql/providers/iru"},"profile":{"name":"profile","type":"\u001biru.profile","title":"Configuration profile installed on an Iru-managed device","is_private":true,"provider":"go.mondoo.com/mql/providers/iru","is_implicit_resource":true},"tenant":{"name":"tenant","type":"\u001biru.tenant","title":"Tenant-level settings (organization name, region, agent rollout versions)","provider":"go.mondoo.com/mql/providers/iru"},"user":{"name":"user","type":"\u001biru.user","title":"Iru end-user record","is_private":true,"provider":"go.mondoo.com/mql/providers/iru","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001biru.user","title":"List every end-user in the Iru directory","provider":"go.mondoo.com/mql/providers/iru"}},"title":"Iru (formerly Kandji)","desc":"Tenant of the Iru (formerly Kandji) MDM service, covering the device fleet (hardware, OS, security posture, enrollment state, installed apps and configuration profiles), configuration blueprints, the library item catalog (App Store apps, custom apps, custom profiles, scripts, MDM restrictions, and other policy items), the directory of end-users, and tenant-level settings. Sub-resources are populated from the Iru API and respect the permissions granted to the bearer token used to connect.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/providers/iru"},"iru.app":{"id":"iru.app","name":"iru.app","fields":{"bundleId":{"name":"bundleId","type":"\u0007","is_mandatory":true,"title":"Application bundle identifier (e.g. `com.apple.Safari`)","provider":"go.mondoo.com/mql/providers/iru"},"isAppleApp":{"name":"isAppleApp","type":"\u0004","is_mandatory":true,"title":"Whether the application is an Apple-signed first-party application","provider":"go.mondoo.com/mql/providers/iru"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Application name as reported by the device","provider":"go.mondoo.com/mql/providers/iru"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Absolute filesystem path to the application bundle","provider":"go.mondoo.com/mql/providers/iru"},"shortVersion":{"name":"shortVersion","type":"\u0007","is_mandatory":true,"title":"CFBundleShortVersionString reported by the application","provider":"go.mondoo.com/mql/providers/iru"},"teamIdentifier":{"name":"teamIdentifier","type":"\u0007","is_mandatory":true,"title":"Codesign team identifier (TID) extracted from the application signature","provider":"go.mondoo.com/mql/providers/iru"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"CFBundleVersion reported by the application","provider":"go.mondoo.com/mql/providers/iru"}},"title":"Installed application on an Iru-managed device","private":true,"min_provider_version":"13.0.0","defaults":"name version bundleId","provider":"go.mondoo.com/mql/providers/iru"},"iru.blueprint":{"id":"iru.blueprint","name":"iru.blueprint","fields":{"created":{"name":"created","type":"\t","is_mandatory":true,"title":"When the blueprint was created","provider":"go.mondoo.com/mql/providers/iru"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description set in the Iru admin console","provider":"go.mondoo.com/mql/providers/iru"},"devicesCount":{"name":"devicesCount","type":"\u0005","is_mandatory":true,"title":"Number of devices currently assigned to the blueprint","provider":"go.mondoo.com/mql/providers/iru"},"enrollmentCode":{"name":"enrollmentCode","type":"\u0007","is_mandatory":true,"title":"Enrollment code (used during ADE/manual enrollment to assign the blueprint)","provider":"go.mondoo.com/mql/providers/iru"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Blueprint identifier","provider":"go.mondoo.com/mql/providers/iru"},"libraryItems":{"name":"libraryItems","type":"\u0019\u001biru.libraryItem","title":"Library items assigned to the blueprint","provider":"go.mondoo.com/mql/providers/iru"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Blueprint name","provider":"go.mondoo.com/mql/providers/iru"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"When the blueprint was last modified","provider":"go.mondoo.com/mql/providers/iru"}},"title":"Iru blueprint, a bundle of library items assigned to devices","private":true,"min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/providers/iru"},"iru.device":{"id":"iru.device","name":"iru.device","fields":{"activationLockBypassCodePresent":{"name":"activationLockBypassCodePresent","type":"\u0004","title":"Whether an Activation Lock bypass code is escrowed in Iru","provider":"go.mondoo.com/mql/providers/iru"},"activationLockEnabled":{"name":"activationLockEnabled","type":"\u0004","title":"Whether Activation Lock is currently enabled on the device","provider":"go.mondoo.com/mql/providers/iru"},"agentInstalled":{"name":"agentInstalled","type":"\u0004","is_mandatory":true,"title":"Whether the Iru agent is installed on the device","provider":"go.mondoo.com/mql/providers/iru"},"agentVersion":{"name":"agentVersion","type":"\u0007","is_mandatory":true,"title":"Iru agent version installed on the device","provider":"go.mondoo.com/mql/providers/iru"},"appleSilicon":{"name":"appleSilicon","type":"\u0004","title":"Whether the device runs on Apple silicon","provider":"go.mondoo.com/mql/providers/iru"},"apps":{"name":"apps","type":"\u0019\u001biru.app","title":"Installed applications reported by the device","provider":"go.mondoo.com/mql/providers/iru"},"assetTag":{"name":"assetTag","type":"\u0007","is_mandatory":true,"title":"Asset tag assigned in the Iru admin console","provider":"go.mondoo.com/mql/providers/iru"},"autoUpdateEnabled":{"name":"autoUpdateEnabled","type":"\u0004","title":"Whether macOS automatic security updates are enabled","provider":"go.mondoo.com/mql/providers/iru"},"batteryCycleCount":{"name":"batteryCycleCount","type":"\u0005","title":"Battery cycle count (Mac/iOS battery health indicator); 0 if unreported","provider":"go.mondoo.com/mql/providers/iru"},"blueprint":{"name":"blueprint","type":"\u001biru.blueprint","title":"Blueprint assigned to the device","provider":"go.mondoo.com/mql/providers/iru"},"bluetoothMac":{"name":"bluetoothMac","type":"\u0007","title":"Bluetooth MAC address","provider":"go.mondoo.com/mql/providers/iru"},"bootstrapTokenEscrowed":{"name":"bootstrapTokenEscrowed","type":"\u0004","title":"Whether a bootstrap token has been escrowed to Apple's MDM servers","provider":"go.mondoo.com/mql/providers/iru"},"coreCount":{"name":"coreCount","type":"\u0005","title":"Number of CPU cores reported by the device","provider":"go.mondoo.com/mql/providers/iru"},"dep":{"name":"dep","type":"\u0004","title":"Whether the device was enrolled via Apple Automated Device Enrollment (DEP/ABM)","provider":"go.mondoo.com/mql/providers/iru"},"ethernetMac":{"name":"ethernetMac","type":"\u0007","title":"Ethernet MAC address","provider":"go.mondoo.com/mql/providers/iru"},"filevaultEnabled":{"name":"filevaultEnabled","type":"\u0004","title":"Whether FileVault full-disk encryption is enabled","provider":"go.mondoo.com/mql/providers/iru"},"filevaultRecoveryKeyEscrowed":{"name":"filevaultRecoveryKeyEscrowed","type":"\u0004","title":"Whether the FileVault personal recovery key has been escrowed to Iru","provider":"go.mondoo.com/mql/providers/iru"},"filevaultRecoveryKeyType":{"name":"filevaultRecoveryKeyType","type":"\u0007","title":"Type of FileVault recovery key in use, typically `personal` or `institutional`","provider":"go.mondoo.com/mql/providers/iru"},"findMyEnabled":{"name":"findMyEnabled","type":"\u0004","title":"Whether Find My is enabled on the device","provider":"go.mondoo.com/mql/providers/iru"},"firewallEnabled":{"name":"firewallEnabled","type":"\u0004","title":"Whether the application firewall is enabled","provider":"go.mondoo.com/mql/providers/iru"},"firewallStealthMode":{"name":"firewallStealthMode","type":"\u0004","title":"Whether the application firewall is configured in stealth mode","provider":"go.mondoo.com/mql/providers/iru"},"gatekeeperEnabled":{"name":"gatekeeperEnabled","type":"\u0004","title":"Whether macOS Gatekeeper is enabled","provider":"go.mondoo.com/mql/providers/iru"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Unique Iru device ID","provider":"go.mondoo.com/mql/providers/iru"},"ipAddress":{"name":"ipAddress","type":"\u0007","title":"Most recent IP address recorded for the device","provider":"go.mondoo.com/mql/providers/iru"},"lastCheckIn":{"name":"lastCheckIn","type":"\t","is_mandatory":true,"title":"Last time the device checked in with Iru","provider":"go.mondoo.com/mql/providers/iru"},"lastEnrollment":{"name":"lastEnrollment","type":"\t","title":"Most recent enrollment timestamp","provider":"go.mondoo.com/mql/providers/iru"},"mdmEnabled":{"name":"mdmEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the MDM payload is currently installed and active","provider":"go.mondoo.com/mql/providers/iru"},"memory":{"name":"memory","type":"\u0005","title":"Total installed memory in bytes","provider":"go.mondoo.com/mql/providers/iru"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Hardware model, for example \"MacBook Pro\" or \"iPhone 15 Pro\"","provider":"go.mondoo.com/mql/providers/iru"},"modelIdentifier":{"name":"modelIdentifier","type":"\u0007","title":"Apple model identifier, for example \"MacBookPro18,1\"","provider":"go.mondoo.com/mql/providers/iru"},"mrtVersion":{"name":"mrtVersion","type":"\u0007","title":"Malware Removal Tool (MRT) version installed on the device","provider":"go.mondoo.com/mql/providers/iru"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Device display name as shown in the Iru admin console","provider":"go.mondoo.com/mql/providers/iru"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"Operating system version installed on the device","provider":"go.mondoo.com/mql/providers/iru"},"platform":{"name":"platform","type":"\u0007","is_mandatory":true,"title":"Device platform, one of `Mac`, `iPad`, `iPhone`, `AppleTV`, `Vision`","provider":"go.mondoo.com/mql/providers/iru"},"processor":{"name":"processor","type":"\u0007","title":"Processor name reported by the device","provider":"go.mondoo.com/mql/providers/iru"},"profiles":{"name":"profiles","type":"\u0019\u001biru.profile","title":"Installed configuration profiles reported by the device","provider":"go.mondoo.com/mql/providers/iru"},"publicIpAddress":{"name":"publicIpAddress","type":"\u0007","title":"Public IP address reported on the device's last check-in","provider":"go.mondoo.com/mql/providers/iru"},"remoteDesktopEnabled":{"name":"remoteDesktopEnabled","type":"\u0004","title":"Whether Remote Desktop (ARD) is enabled","provider":"go.mondoo.com/mql/providers/iru"},"screensaverLockEnabled":{"name":"screensaverLockEnabled","type":"\u0004","title":"Whether a screen-saver lock is required","provider":"go.mondoo.com/mql/providers/iru"},"secureBootLevel":{"name":"secureBootLevel","type":"\u0007","title":"Apple secure boot level reported by the device","provider":"go.mondoo.com/mql/providers/iru"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Hardware serial number","provider":"go.mondoo.com/mql/providers/iru"},"sipEnabled":{"name":"sipEnabled","type":"\u0004","title":"Whether macOS System Integrity Protection (SIP) is enabled","provider":"go.mondoo.com/mql/providers/iru"},"supervised":{"name":"supervised","type":"\u0004","title":"Whether the device is in Apple's supervised state","provider":"go.mondoo.com/mql/providers/iru"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied to the device in the Iru admin console","provider":"go.mondoo.com/mql/providers/iru"},"udid":{"name":"udid","type":"\u0007","is_mandatory":true,"title":"Device UDID (Apple-assigned unique device identifier)","provider":"go.mondoo.com/mql/providers/iru"},"user":{"name":"user","type":"\u001biru.user","title":"End-user assigned to the device, if any","provider":"go.mondoo.com/mql/providers/iru"},"userApprovedMdm":{"name":"userApprovedMdm","type":"\u0004","title":"Whether the user approved MDM enrollment (required for many payloads on macOS)","provider":"go.mondoo.com/mql/providers/iru"},"volumes":{"name":"volumes","type":"\u0019\n","title":"Storage volumes reported by the device; each entry includes `name`, `identifier`, `size_bytes`, `free_bytes`, `encrypted`, and `boot_volume`","provider":"go.mondoo.com/mql/providers/iru"},"wifiMac":{"name":"wifiMac","type":"\u0007","title":"Wi-Fi MAC address","provider":"go.mondoo.com/mql/providers/iru"},"xprotectVersion":{"name":"xprotectVersion","type":"\u0007","title":"XProtect definition version installed on the device","provider":"go.mondoo.com/mql/providers/iru"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"Iru device lookup by ID","desc":"Single device identified by its Iru device ID. The `id` field selects the device, for example `iru.device(id: \"abc123\") { osVersion filevaultEnabled }`. Use `iru.devices` when iterating the full fleet.","min_provider_version":"13.0.0","defaults":"name serialNumber osVersion platform","provider":"go.mondoo.com/mql/providers/iru"},"iru.libraryItem":{"id":"iru.libraryItem","name":"iru.libraryItem","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the item is currently active in the tenant","provider":"go.mondoo.com/mql/providers/iru"},"blueprints":{"name":"blueprints","type":"\u0019\u001biru.blueprint","title":"Blueprints that reference this library item","provider":"go.mondoo.com/mql/providers/iru"},"counts":{"name":"counts","type":"\u001a\u0007\u0005","is_mandatory":true,"title":"Per-status assignment counts (`installed`, `pending`, `failed`, …) keyed by status name","provider":"go.mondoo.com/mql/providers/iru"},"created":{"name":"created","type":"\t","is_mandatory":true,"title":"When the library item was created","provider":"go.mondoo.com/mql/providers/iru"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Library item identifier","provider":"go.mondoo.com/mql/providers/iru"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Library item kind","desc":"Values include `app-store-app`, `custom-app`, `custom-profile`, `profile`, `script`, `mdm-restrictions`, `filevault`, `gatekeeper`, and other policy types.","provider":"go.mondoo.com/mql/providers/iru"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Library item name","provider":"go.mondoo.com/mql/providers/iru"},"payload":{"name":"payload","type":"\n","is_mandatory":true,"title":"Kind-specific configuration; shape varies by `kind`","provider":"go.mondoo.com/mql/providers/iru"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"When the library item was last modified","provider":"go.mondoo.com/mql/providers/iru"}},"title":"Iru library item, a single entry in the Iru policy/app/profile catalog","desc":"One entry in the tenant library catalog. Apps, configuration profiles, custom apps, custom profiles, scripts, MDM restrictions, FileVault, Gatekeeper, and other policy items all live in the same catalog. The `kind` field discriminates the entry type (for example `iru.libraryItems.where(kind == \"script\")`) and `payload` carries the kind-specific configuration: scripts expose `script` / `run_on` / `run_frequency`; App Store apps expose `app_id` / `bundle_id` / `version`; custom profiles expose the profile metadata.","private":true,"min_provider_version":"13.0.0","defaults":"name kind active","provider":"go.mondoo.com/mql/providers/iru"},"iru.profile":{"id":"iru.profile","name":"iru.profile","fields":{"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Human-readable display name for the profile","provider":"go.mondoo.com/mql/providers/iru"},"encrypted":{"name":"encrypted","type":"\u0004","is_mandatory":true,"title":"Whether the profile is signed/encrypted","provider":"go.mondoo.com/mql/providers/iru"},"identifier":{"name":"identifier","type":"\u0007","is_mandatory":true,"title":"Profile identifier (typically a reverse-DNS string)","provider":"go.mondoo.com/mql/providers/iru"},"installedBy":{"name":"installedBy","type":"\u0007","is_mandatory":true,"title":"Source that installed the profile (`MDM`, the user, or another mechanism)","provider":"go.mondoo.com/mql/providers/iru"},"organization":{"name":"organization","type":"\u0007","is_mandatory":true,"title":"Organization listed on the profile","provider":"go.mondoo.com/mql/providers/iru"},"removable":{"name":"removable","type":"\u0004","is_mandatory":true,"title":"Whether the profile can be removed by the end-user","provider":"go.mondoo.com/mql/providers/iru"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"Profile UUID","provider":"go.mondoo.com/mql/providers/iru"}},"title":"Configuration profile installed on an Iru-managed device","private":true,"min_provider_version":"13.0.0","defaults":"displayName identifier","provider":"go.mondoo.com/mql/providers/iru"},"iru.tenant":{"id":"iru.tenant","name":"iru.tenant","fields":{"agentLatestVersion":{"name":"agentLatestVersion","type":"\u0007","is_mandatory":true,"title":"Latest Iru agent version advertised by the tenant","provider":"go.mondoo.com/mql/providers/iru"},"agentMinimumVersion":{"name":"agentMinimumVersion","type":"\u0007","is_mandatory":true,"title":"Minimum Iru agent version configured for the tenant","provider":"go.mondoo.com/mql/providers/iru"},"organizationName":{"name":"organizationName","type":"\u0007","is_mandatory":true,"title":"Organization name as configured in the Iru admin console","provider":"go.mondoo.com/mql/providers/iru"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region the tenant runs in","provider":"go.mondoo.com/mql/providers/iru"},"subdomain":{"name":"subdomain","type":"\u0007","is_mandatory":true,"title":"Tenant subdomain (the prefix of the `*.api.kandji.io` hostname)","provider":"go.mondoo.com/mql/providers/iru"}},"title":"Iru tenant settings","desc":"Tenant-level metadata: the tenant subdomain, organization name, region, and the minimum and latest Iru agent versions advertised to managed devices.","private":true,"min_provider_version":"13.0.0","defaults":"organizationName subdomain region","provider":"go.mondoo.com/mql/providers/iru"},"iru.user":{"id":"iru.user","name":"iru.user","fields":{"archived":{"name":"archived","type":"\u0004","is_mandatory":true,"title":"Whether the user is archived (no longer active in the directory)","provider":"go.mondoo.com/mql/providers/iru"},"department":{"name":"department","type":"\u0007","is_mandatory":true,"title":"Department recorded for the user","provider":"go.mondoo.com/mql/providers/iru"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Email address recorded for the user","provider":"go.mondoo.com/mql/providers/iru"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"User identifier","provider":"go.mondoo.com/mql/providers/iru"},"jobTitle":{"name":"jobTitle","type":"\u0007","is_mandatory":true,"title":"Job title recorded for the user","provider":"go.mondoo.com/mql/providers/iru"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Display name for the user","provider":"go.mondoo.com/mql/providers/iru"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"Username (login name) recorded for the user","provider":"go.mondoo.com/mql/providers/iru"}},"title":"Iru end-user record","private":true,"min_provider_version":"13.0.0","defaults":"name email","provider":"go.mondoo.com/mql/providers/iru"}}}