{"resources":{"jamf":{"id":"jamf","name":"jamf","fields":{"computer":{"name":"computer","type":"\u001bjamf.computer","title":"Jamf Pro computer inventory record","desc":"Managed Apple computer enrolled in Jamf Pro, covering hardware identity (make, model, modelIdentifier, serialNumber, processor, and memory), the installed operating system and build, network addresses, and enrollment and inventory timestamps. Security posture is exposed through fields such as fileVault2Status, firewallEnabled, activationLockEnabled, and enrolledViaAutomatedDeviceEnrollment, making it the primary record for auditing disk encryption, firewall, and enrollment state across a fleet. The localUserAccounts field lists the local accounts present on the device.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"computerGroup":{"name":"computerGroup","type":"\u001bjamf.computerGroup","title":"Jamf smart or static computer group","desc":"A computer group used to scope policies, configuration profiles, and restricted software in Jamf Pro. Smart groups populate automatically from membership criteria, while static groups hold a manually assigned set of computers. The `smartGroup` field distinguishes the two, which matters when auditing how a control is targeted (criteria-driven versus hand-picked). Groups are the primary scoping unit referenced by policy and restricted-software scopes.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"computerGroups":{"name":"computerGroups","type":"\u0019\u001bjamf.computerGroup","title":"Retrieve all computer groups (both smart and static); inspect the `smartGroup` field on each entry to distinguish the two","provider":"go.mondoo.com/mql/v13/providers/jamf"},"computerInventory":{"name":"computerInventory","type":"\u0019\u001bjamf.computer","title":"Retrieve a list of all computers in the Jamf Pro inventory","provider":"go.mondoo.com/mql/v13/providers/jamf"},"computerInventoryCount":{"name":"computerInventoryCount","type":"\u0005","title":"Return the total number of computer inventory records","provider":"go.mondoo.com/mql/v13/providers/jamf"},"localUserAccount":{"name":"localUserAccount","type":"\u001bjamf.localUserAccount","title":"Local user account on a Jamf-managed computer","desc":"A single local macOS account on a managed computer, covering its identity (uid, username, fullName), privilege level (admin), disk encryption enrollment (fileVault2Enabled), and the local password policy applied to it (passwordMaxAge, passwordMinLength, passwordMinComplexCharacters). Use it to audit for unexpected admin accounts, users left out of FileVault, and weak local password requirements across the fleet.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"package":{"name":"package","type":"\u001bjamf.package","title":"Jamf Pro package definition","desc":"Software package uploaded to Jamf Pro for deployment through policies, covering installer metadata, content integrity, and installation behavior. The `id` field selects a single package, for example `jamf.package(id: \"42\")`. The `sha256` hash lets you verify package integrity, and fields such as `rebootRequired`, `fillUserTemplate`, and `osRequirements` describe how and where the payload installs. Auditing packages surfaces unsigned or unexpected software staged for distribution across managed devices.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"packages":{"name":"packages","type":"\u0019\u001bjamf.package","title":"Retrieve a list of all software packages configured in Jamf Pro","provider":"go.mondoo.com/mql/v13/providers/jamf"},"policies":{"name":"policies","type":"\u0019\u001bjamf.policy","title":"Retrieve a list of all policies configured in Jamf Pro","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"policy":{"name":"policy","type":"\u001bjamf.policy","title":"Jamf Pro policy","desc":"Automated action that runs scripts, installs packages, and performs maintenance on scoped computers in Jamf Pro. The `id` field selects a single policy, for example `jamf.policy(id: \"42\")`. Each policy reports what triggers it (frequency, check-in, login, enrollment, startup), the packages it installs and scripts it runs, any files/processes command it executes, its Self Service presentation, and the computers in scope. Auditing policies surfaces unsanctioned software installs, arbitrary shell commands, and overly broad targeting across the fleet.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"restrictedSoftware":{"name":"restrictedSoftware","type":"\u0019\u001bjamf.restrictedSoftware","title":"Retrieve a list of all restricted software definitions configured in Jamf Pro","provider":"go.mondoo.com/mql/v13/providers/jamf"},"script":{"name":"script","type":"\u001bjamf.script","title":"Jamf Pro script","desc":"Script available for deployment through Jamf Pro policies. The `id` field selects a single script, for example `jamf.script(id: \"12\")`. Each script exposes its shell contents, the execution priority (Before, After, or At Reboot), operating system requirements, and the labeled runtime parameters that policies pass in.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"scripts":{"name":"scripts","type":"\u0019\u001bjamf.script","title":"Retrieve a list of all scripts configured in Jamf Pro","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"sso":{"name":"sso","type":"\u001bjamf.ssoSettings","title":"Retrieve current SSO configuration settings","provider":"go.mondoo.com/mql/v13/providers/jamf"},"ssoSettings":{"name":"ssoSettings","type":"\u001bjamf.ssoSettings","title":"Single Sign-On (SSO) settings for Jamf Pro","desc":"Top-level fields apply regardless of which identity protocol is in use. SAML-specific fields (sessionTimeout, idpUrl, idpProviderType, userAttributeEnabled, userAttributeName, userMapping, tokenExpirationDisabled, groupAttributeName, entityId) are null when the tenant is configured for OIDC only. OIDC-specific fields (oidcUserMapping, oidcJamfIdAuthenticationEnabled, oidcUsernameAttributeClaimMapping) are null when the tenant is configured for SAML only. Use `configurationType` to branch.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"user":{"name":"user","type":"\u001bjamf.user","title":"Jamf Pro user summary","desc":"User account known to Jamf Pro, as returned when listing every user with `jamf.users`. Each entry carries the account's numeric `id` and its `name` (username), enough to inventory the user population or feed a lookup. For the full record (email, full name, phone, position, and custom-photo state) select a single user by name with `jamf.userByName(name: \"jsmith\")`.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"userByName":{"name":"userByName","type":"\u001bjamf.userByName","title":"Jamf Pro user lookup by username","desc":"Single Jamf user identified by username, covering full name, email, phone, position, and whether a custom photo is enabled. The `name` field selects the user, for example `jamf.userByName(name: \"jsmith\") { email position }`. Use `jamf.users` when you need to iterate every user instead of looking one up by name.","provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001bjamf.user","title":"Retrieve a list of all user accounts configured in Jamf Pro","provider":"go.mondoo.com/mql/v13/providers/jamf"},"version":{"name":"version","type":"\u0007","title":"Retrieve the Jamf Pro version string","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf Pro","desc":"Jamf Pro instance for managing Apple devices. The computer inventory exposes hardware, OS, security posture, enrollment state, and local user accounts; alongside it sit the software package catalog, SSO configuration, smart and static computer groups, policies, scripts, restricted software definitions, and the Jamf user directory. The Jamf Pro server version is available via `version`.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.computer":{"id":"jamf.computer","name":"jamf.computer","fields":{"activationLockEnabled":{"name":"activationLockEnabled","type":"\u0004","is_mandatory":true,"title":"Whether activation lock is enabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"assetTag":{"name":"assetTag","type":"\u0007","is_mandatory":true,"title":"Asset tag assigned to the computer","provider":"go.mondoo.com/mql/v13/providers/jamf"},"autoLoginDisabled":{"name":"autoLoginDisabled","type":"\u0004","is_mandatory":true,"title":"Whether auto-login is disabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"build":{"name":"build","type":"\u0007","is_mandatory":true,"title":"OS build number (e.g., 23F79)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"coreCount":{"name":"coreCount","type":"\u0005","is_mandatory":true,"title":"Total number of processor cores","provider":"go.mondoo.com/mql/v13/providers/jamf"},"enrolledViaAutomatedDeviceEnrollment":{"name":"enrolledViaAutomatedDeviceEnrollment","type":"\u0004","is_mandatory":true,"title":"Whether enrolled via Automated Device Enrollment","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fileVault2Status":{"name":"fileVault2Status","type":"\u0007","is_mandatory":true,"title":"FileVault 2 encryption status","desc":"For example: VALID, NOT_APPLICABLE, BOOT_PARTITION_ENCRYPTED, VALID_BUT_DISABLED_BY_USER, INDIVIDUAL_RECOVERY_KEY_USED, PERSONAL_RECOVERY_KEY_REQUIRED, INSTITUTIONAL_RECOVERY_KEY_USED.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"firewallEnabled":{"name":"firewallEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the firewall is enabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Computer ID","provider":"go.mondoo.com/mql/v13/providers/jamf"},"initialEntryDate":{"name":"initialEntryDate","type":"\t","is_mandatory":true,"title":"Initial entry date into the Jamf system","provider":"go.mondoo.com/mql/v13/providers/jamf"},"itunesStoreAccountActive":{"name":"itunesStoreAccountActive","type":"\u0004","is_mandatory":true,"title":"Whether iTunes Store account is active","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamfBinaryVersion":{"name":"jamfBinaryVersion","type":"\u0007","is_mandatory":true,"title":"Version of the Jamf binary installed","provider":"go.mondoo.com/mql/v13/providers/jamf"},"lastContactTime":{"name":"lastContactTime","type":"\t","is_mandatory":true,"title":"Timestamp of last contact with Jamf","provider":"go.mondoo.com/mql/v13/providers/jamf"},"lastEnrolledDate":{"name":"lastEnrolledDate","type":"\t","is_mandatory":true,"title":"Enrollment date in Jamf","provider":"go.mondoo.com/mql/v13/providers/jamf"},"lastIpAddress":{"name":"lastIpAddress","type":"\u0007","is_mandatory":true,"title":"Last known IP address","provider":"go.mondoo.com/mql/v13/providers/jamf"},"lastReportedIp":{"name":"lastReportedIp","type":"\u0007","is_mandatory":true,"title":"Last reported IP address","provider":"go.mondoo.com/mql/v13/providers/jamf"},"localUserAccounts":{"name":"localUserAccounts","type":"\u0019\u001bjamf.localUserAccount","title":"List of local user accounts on the computer","provider":"go.mondoo.com/mql/v13/providers/jamf"},"macAddress":{"name":"macAddress","type":"\u0007","is_mandatory":true,"title":"MAC address of the computer","provider":"go.mondoo.com/mql/v13/providers/jamf"},"make":{"name":"make","type":"\u0007","is_mandatory":true,"title":"Manufacturer (e.g., Apple)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model name (e.g., MacBook Pro)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"modelIdentifier":{"name":"modelIdentifier","type":"\u0007","is_mandatory":true,"title":"Apple model identifier (e.g., MacBookPro18,2)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Computer name","provider":"go.mondoo.com/mql/v13/providers/jamf"},"operatingSystemName":{"name":"operatingSystemName","type":"\u0007","is_mandatory":true,"title":"Operating system name (e.g., macOS)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"operatingSystemVersion":{"name":"operatingSystemVersion","type":"\u0007","is_mandatory":true,"title":"OS version installed","provider":"go.mondoo.com/mql/v13/providers/jamf"},"platform":{"name":"platform","type":"\u0007","is_mandatory":true,"title":"Platform identifier (e.g., Mac, iOS)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"processorArchitecture":{"name":"processorArchitecture","type":"\u0007","is_mandatory":true,"title":"Processor architecture (e.g., x86_64, arm64)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"processorCount":{"name":"processorCount","type":"\u0005","is_mandatory":true,"title":"Number of processors","provider":"go.mondoo.com/mql/v13/providers/jamf"},"processorType":{"name":"processorType","type":"\u0007","is_mandatory":true,"title":"Type of processor (e.g., Apple M1, Intel i5)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"reportDate":{"name":"reportDate","type":"\t","is_mandatory":true,"title":"Date of last inventory report","provider":"go.mondoo.com/mql/v13/providers/jamf"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number of the device","provider":"go.mondoo.com/mql/v13/providers/jamf"},"totalRamMegabytes":{"name":"totalRamMegabytes","type":"\u0005","is_mandatory":true,"title":"Total RAM in MB","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf Pro computer inventory record","desc":"Managed Apple computer enrolled in Jamf Pro, covering hardware identity (make, model, modelIdentifier, serialNumber, processor, and memory), the installed operating system and build, network addresses, and enrollment and inventory timestamps. Security posture is exposed through fields such as fileVault2Status, firewallEnabled, activationLockEnabled, and enrolledViaAutomatedDeviceEnrollment, making it the primary record for auditing disk encryption, firewall, and enrollment state across a fleet. The localUserAccounts field lists the local accounts present on the device.","private":true,"min_provider_version":"13.0.0","defaults":"name platform","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.computerGroup":{"id":"jamf.computerGroup","name":"jamf.computerGroup","fields":{"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Group ID","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Group name","provider":"go.mondoo.com/mql/v13/providers/jamf"},"smartGroup":{"name":"smartGroup","type":"\u0004","is_mandatory":true,"title":"Whether the group is a smart group","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf smart or static computer group","desc":"A computer group used to scope policies, configuration profiles, and restricted software in Jamf Pro. Smart groups populate automatically from membership criteria, while static groups hold a manually assigned set of computers. The `smartGroup` field distinguishes the two, which matters when auditing how a control is targeted (criteria-driven versus hand-picked). Groups are the primary scoping unit referenced by policy and restricted-software scopes.","private":true,"min_provider_version":"13.0.0","defaults":"name smartGroup","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.localUserAccount":{"id":"jamf.localUserAccount","name":"jamf.localUserAccount","fields":{"admin":{"name":"admin","type":"\u0004","is_mandatory":true,"title":"Whether the account has admin privileges","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fileVault2Enabled":{"name":"fileVault2Enabled","type":"\u0004","is_mandatory":true,"title":"Whether FileVault2 is enabled for this account","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fullName":{"name":"fullName","type":"\u0007","is_mandatory":true,"title":"Full name of the account owner","provider":"go.mondoo.com/mql/v13/providers/jamf"},"homeDirectory":{"name":"homeDirectory","type":"\u0007","is_mandatory":true,"title":"Home directory path of the user","provider":"go.mondoo.com/mql/v13/providers/jamf"},"passwordMaxAge":{"name":"passwordMaxAge","type":"\u0005","is_mandatory":true,"title":"Maximum password age in days","provider":"go.mondoo.com/mql/v13/providers/jamf"},"passwordMinComplexCharacters":{"name":"passwordMinComplexCharacters","type":"\u0005","is_mandatory":true,"title":"Minimum number of complex characters in password","provider":"go.mondoo.com/mql/v13/providers/jamf"},"passwordMinLength":{"name":"passwordMinLength","type":"\u0005","is_mandatory":true,"title":"Minimum password length","provider":"go.mondoo.com/mql/v13/providers/jamf"},"uid":{"name":"uid","type":"\u0007","is_mandatory":true,"title":"System UID of the user","provider":"go.mondoo.com/mql/v13/providers/jamf"},"userAccountType":{"name":"userAccountType","type":"\u0007","is_mandatory":true,"title":"Type of user account (e.g., Standard, Admin)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"username":{"name":"username","type":"\u0007","is_mandatory":true,"title":"Username of the account","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Local user account on a Jamf-managed computer","desc":"A single local macOS account on a managed computer, covering its identity (uid, username, fullName), privilege level (admin), disk encryption enrollment (fileVault2Enabled), and the local password policy applied to it (passwordMaxAge, passwordMinLength, passwordMinComplexCharacters). Use it to audit for unexpected admin accounts, users left out of FileVault, and weak local password requirements across the fleet.","private":true,"min_provider_version":"13.0.0","defaults":"username","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.package":{"id":"jamf.package","name":"jamf.package","fields":{"basePath":{"name":"basePath","type":"\u0007","is_mandatory":true,"title":"Base path where the package is stored on the distribution point","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"categoryId":{"name":"categoryId","type":"\u0007","is_mandatory":true,"title":"ID of the category assigned to the package","provider":"go.mondoo.com/mql/v13/providers/jamf"},"cloudTransferStatus":{"name":"cloudTransferStatus","type":"\u0007","is_mandatory":true,"title":"Cloud transfer status of the package","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fileName":{"name":"fileName","type":"\u0007","is_mandatory":true,"title":"File name of the package","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fillExistingUsers":{"name":"fillExistingUsers","type":"\u0004","is_mandatory":true,"title":"Whether the package is installed into existing user home directories","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fillUserTemplate":{"name":"fillUserTemplate","type":"\u0004","is_mandatory":true,"title":"Whether the package is installed into the user template","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"Package file format","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Package ID","provider":"go.mondoo.com/mql/v13/providers/jamf"},"ignoreConflicts":{"name":"ignoreConflicts","type":"\u0004","is_mandatory":true,"title":"Whether conflicts are ignored during installation","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"indexed":{"name":"indexed","type":"\u0004","is_mandatory":true,"title":"Whether the package is indexed","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"info":{"name":"info","type":"\u0007","is_mandatory":true,"title":"Administrator-facing information shown for the package","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"installLanguage":{"name":"installLanguage","type":"\u0007","is_mandatory":true,"title":"Language the package installs in","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"manifest":{"name":"manifest","type":"\u0007","is_mandatory":true,"title":"Installation manifest contents","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"manifestFileName":{"name":"manifestFileName","type":"\u0007","is_mandatory":true,"title":"File name of the installation manifest","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the package","provider":"go.mondoo.com/mql/v13/providers/jamf"},"notes":{"name":"notes","type":"\u0007","is_mandatory":true,"title":"Administrator-facing notes attached to the package","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"osInstall":{"name":"osInstall","type":"\u0004","is_mandatory":true,"title":"Whether this is an OS installer","provider":"go.mondoo.com/mql/v13/providers/jamf"},"osInstallerVersion":{"name":"osInstallerVersion","type":"\u0007","is_mandatory":true,"title":"Version of the OS this installer package delivers","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"osRequirements":{"name":"osRequirements","type":"\u0007","is_mandatory":true,"title":"Operating system requirements that must be met to install the package","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"parentPackage":{"name":"parentPackage","type":"\u001bjamf.package","title":"Parent package this package derives from","desc":"Resolves parentPackageId to the originating package. Null when the package has no parent.","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"parentPackageId":{"name":"parentPackageId","type":"\u0007","is_mandatory":true,"title":"ID of the parent package this package derives from","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Priority value (used in installation ordering)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"rebootRequired":{"name":"rebootRequired","type":"\u0004","is_mandatory":true,"title":"Whether installing the package requires a reboot","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"selfHealNotify":{"name":"selfHealNotify","type":"\u0004","is_mandatory":true,"title":"Whether self-heal notifications are shown for the package","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"selfHealingAction":{"name":"selfHealingAction","type":"\u0007","is_mandatory":true,"title":"Action taken when self-healing the package","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number associated with the package","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"sha256":{"name":"sha256","type":"\u0007","is_mandatory":true,"title":"SHA-256 hash of the package contents","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"size":{"name":"size","type":"\u0007","is_mandatory":true,"title":"Size of the package on disk, as reported by Jamf Pro","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"suppressEula":{"name":"suppressEula","type":"\u0004","is_mandatory":true,"title":"Whether the end-user license agreement prompt is suppressed","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"suppressFromDock":{"name":"suppressFromDock","type":"\u0004","is_mandatory":true,"title":"Whether the installed app is suppressed from the Dock","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"},"suppressRegistration":{"name":"suppressRegistration","type":"\u0004","is_mandatory":true,"title":"Whether package registration prompts are suppressed","provider":"go.mondoo.com/mql/v13/providers/jamf"},"suppressUpdates":{"name":"suppressUpdates","type":"\u0004","is_mandatory":true,"title":"Whether package update prompts are suppressed","provider":"go.mondoo.com/mql/v13/providers/jamf"},"swu":{"name":"swu","type":"\u0004","is_mandatory":true,"title":"Whether the package is a software update (SWU)","min_provider_version":"13.0.3","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf Pro package definition","desc":"Software package uploaded to Jamf Pro for deployment through policies, covering installer metadata, content integrity, and installation behavior. The `id` field selects a single package, for example `jamf.package(id: \"42\")`. The `sha256` hash lets you verify package integrity, and fields such as `rebootRequired`, `fillUserTemplate`, and `osRequirements` describe how and where the payload installs. Auditing packages surfaces unsigned or unexpected software staged for distribution across managed devices.","private":true,"min_provider_version":"13.0.0","defaults":"name fileName","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.policy":{"id":"jamf.policy","name":"jamf.policy","fields":{"categoryId":{"name":"categoryId","type":"\u0007","title":"ID of the category assigned to the policy","provider":"go.mondoo.com/mql/v13/providers/jamf"},"categoryName":{"name":"categoryName","type":"\u0007","title":"Name of the category assigned to the policy","provider":"go.mondoo.com/mql/v13/providers/jamf"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether the policy is enabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"filesProcesses":{"name":"filesProcesses","type":"\n","title":"Files and processes the policy acts on","desc":"The `searchByPath` and `searchForProcess` keys hold the file path and process name to look for. The `deleteFile`, `locateFile`, `updateLocateDatabase`, `spotlightSearch`, and `killProcess` booleans select the actions taken, and `runCommand` holds the shell command the policy executes.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"frequency":{"name":"frequency","type":"\u0007","title":"How often the policy runs","desc":"For example \"Once per computer\", \"Once per user per computer\", or \"Ongoing\".","provider":"go.mondoo.com/mql/v13/providers/jamf"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy ID","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the policy","provider":"go.mondoo.com/mql/v13/providers/jamf"},"networkRequirements":{"name":"networkRequirements","type":"\u0007","title":"Network requirement for the policy to run","provider":"go.mondoo.com/mql/v13/providers/jamf"},"offline":{"name":"offline","type":"\u0004","title":"Whether the policy runs while the computer is offline","provider":"go.mondoo.com/mql/v13/providers/jamf"},"package":{"name":"package","type":"\u001bjamf.policy.package","title":"Package action within a Jamf Pro policy","desc":"Single package entry on a policy: the `action` taken (Install, Cache, or Uninstall) and the install options. The `package` field resolves to the full package definition, letting you audit what software a policy deploys.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"packages":{"name":"packages","type":"\u0019\u001bjamf.policy.package","title":"Packages the policy installs, caches, or removes","provider":"go.mondoo.com/mql/v13/providers/jamf"},"retryAttempts":{"name":"retryAttempts","type":"\u0005","title":"Number of times the policy retries","provider":"go.mondoo.com/mql/v13/providers/jamf"},"retryEvent":{"name":"retryEvent","type":"\u0007","title":"Event that causes the policy to retry","provider":"go.mondoo.com/mql/v13/providers/jamf"},"scope":{"name":"scope","type":"\n","title":"Computers, groups, and other entities the policy targets","desc":"The `allComputers` and `allJssUsers` booleans indicate fleet-wide targeting. Targets are listed by id and name under `computers`, `computerGroups`, `buildings`, and `departments`. The `limitations` key narrows the target set with `users`, `userGroups`, and `networkSegments`, and the `exclusions` key removes entities using `computers`, `computerGroups`, `buildings`, `departments`, `users`, `userGroups`, and `networkSegments`.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"scopeAllComputers":{"name":"scopeAllComputers","type":"\u0004","title":"Whether the policy targets all computers","provider":"go.mondoo.com/mql/v13/providers/jamf"},"script":{"name":"script","type":"\u001bjamf.policy.script","title":"Script action within a Jamf Pro policy","desc":"Single script entry on a policy: its execution `priority` and the runtime `parameters` the policy passes. The `script` field resolves to the full script definition, letting you audit the code a policy runs on scoped computers.","is_private":true,"provider":"go.mondoo.com/mql/v13/providers/jamf","is_implicit_resource":true},"scripts":{"name":"scripts","type":"\u0019\u001bjamf.policy.script","title":"Scripts the policy runs","provider":"go.mondoo.com/mql/v13/providers/jamf"},"selfServiceDescription":{"name":"selfServiceDescription","type":"\u0007","title":"Description shown for the policy in Self Service","provider":"go.mondoo.com/mql/v13/providers/jamf"},"selfServiceDisplayName":{"name":"selfServiceDisplayName","type":"\u0007","title":"Display name shown for the policy in Self Service","provider":"go.mondoo.com/mql/v13/providers/jamf"},"selfServiceEnabled":{"name":"selfServiceEnabled","type":"\u0004","title":"Whether the policy is available in Self Service","provider":"go.mondoo.com/mql/v13/providers/jamf"},"siteName":{"name":"siteName","type":"\u0007","title":"Name of the site the policy belongs to","provider":"go.mondoo.com/mql/v13/providers/jamf"},"targetDrive":{"name":"targetDrive","type":"\u0007","title":"Target drive the policy runs against","provider":"go.mondoo.com/mql/v13/providers/jamf"},"trigger":{"name":"trigger","type":"\u0007","title":"Trigger event the policy responds to","provider":"go.mondoo.com/mql/v13/providers/jamf"},"triggerCheckin":{"name":"triggerCheckin","type":"\u0004","title":"Whether the policy runs at recurring check-in","provider":"go.mondoo.com/mql/v13/providers/jamf"},"triggerEnrollmentComplete":{"name":"triggerEnrollmentComplete","type":"\u0004","title":"Whether the policy runs when enrollment completes","provider":"go.mondoo.com/mql/v13/providers/jamf"},"triggerLogin":{"name":"triggerLogin","type":"\u0004","title":"Whether the policy runs at login","provider":"go.mondoo.com/mql/v13/providers/jamf"},"triggerLogout":{"name":"triggerLogout","type":"\u0004","title":"Whether the policy runs at logout","provider":"go.mondoo.com/mql/v13/providers/jamf"},"triggerNetworkStateChanged":{"name":"triggerNetworkStateChanged","type":"\u0004","title":"Whether the policy runs on a network state change","provider":"go.mondoo.com/mql/v13/providers/jamf"},"triggerOther":{"name":"triggerOther","type":"\u0007","title":"Custom trigger event name that runs the policy","provider":"go.mondoo.com/mql/v13/providers/jamf"},"triggerStartup":{"name":"triggerStartup","type":"\u0004","title":"Whether the policy runs at startup","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf Pro policy","desc":"Automated action that runs scripts, installs packages, and performs maintenance on scoped computers in Jamf Pro. The `id` field selects a single policy, for example `jamf.policy(id: \"42\")`. Each policy reports what triggers it (frequency, check-in, login, enrollment, startup), the packages it installs and scripts it runs, any files/processes command it executes, its Self Service presentation, and the computers in scope. Auditing policies surfaces unsanctioned software installs, arbitrary shell commands, and overly broad targeting across the fleet.","private":true,"min_provider_version":"13.0.3","defaults":"name enabled frequency","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.policy.package":{"id":"jamf.policy.package","name":"jamf.policy.package","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action taken for the package","desc":"One of Install, Cache, or Uninstall.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fillExistingUsers":{"name":"fillExistingUsers","type":"\u0004","is_mandatory":true,"title":"Whether the package fills existing user home directories","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fillUserTemplate":{"name":"fillUserTemplate","type":"\u0004","is_mandatory":true,"title":"Whether the package fills the user template","provider":"go.mondoo.com/mql/v13/providers/jamf"},"package":{"name":"package","type":"\u001bjamf.package","title":"Package this entry deploys","provider":"go.mondoo.com/mql/v13/providers/jamf"},"updateAutorun":{"name":"updateAutorun","type":"\u0004","is_mandatory":true,"title":"Whether installing the package updates the autorun setting","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Package action within a Jamf Pro policy","desc":"Single package entry on a policy: the `action` taken (Install, Cache, or Uninstall) and the install options. The `package` field resolves to the full package definition, letting you audit what software a policy deploys.","private":true,"min_provider_version":"13.0.3","defaults":"action","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.policy.script":{"id":"jamf.policy.script","name":"jamf.policy.script","fields":{"parameters":{"name":"parameters","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Runtime parameters the policy passes to the script","desc":"Keyed by parameter slot (parameter4 through parameter11).","provider":"go.mondoo.com/mql/v13/providers/jamf"},"priority":{"name":"priority","type":"\u0007","is_mandatory":true,"title":"Stage at which the script runs","desc":"One of Before, After, or At Reboot.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"script":{"name":"script","type":"\u001bjamf.script","title":"Script this entry runs","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Script action within a Jamf Pro policy","desc":"Single script entry on a policy: its execution `priority` and the runtime `parameters` the policy passes. The `script` field resolves to the full script definition, letting you audit the code a policy runs on scoped computers.","private":true,"min_provider_version":"13.0.3","defaults":"priority","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.restrictedSoftware":{"id":"jamf.restrictedSoftware","name":"jamf.restrictedSoftware","fields":{"allComputers":{"name":"allComputers","type":"\u0004","title":"Whether the rule applies to all computers","provider":"go.mondoo.com/mql/v13/providers/jamf"},"deleteExecutable":{"name":"deleteExecutable","type":"\u0004","title":"Whether the matched executable is deleted","provider":"go.mondoo.com/mql/v13/providers/jamf"},"displayMessage":{"name":"displayMessage","type":"\u0007","title":"Message displayed to the user when the process is restricted","provider":"go.mondoo.com/mql/v13/providers/jamf"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Restricted software ID","provider":"go.mondoo.com/mql/v13/providers/jamf"},"killProcess":{"name":"killProcess","type":"\u0004","title":"Whether the matched process is killed","provider":"go.mondoo.com/mql/v13/providers/jamf"},"matchExactProcessName":{"name":"matchExactProcessName","type":"\u0004","title":"Whether the process name must match exactly","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the restricted software definition","provider":"go.mondoo.com/mql/v13/providers/jamf"},"processName":{"name":"processName","type":"\u0007","title":"Process name that the rule matches","provider":"go.mondoo.com/mql/v13/providers/jamf"},"scope":{"name":"scope","type":"\n","title":"Computers, groups, buildings, and departments the rule targets","desc":"The `allComputers` key is true when the rule targets every computer. The `computers`, `computerGroups`, `buildings`, and `departments` keys each list the targeted entities by id and name. The `exclusions` key holds the same structure for excluded `computers`, `computerGroups`, `buildings`, `departments`, and `users`.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"sendNotification":{"name":"sendNotification","type":"\u0004","title":"Whether a notification is sent when the matched process is found","provider":"go.mondoo.com/mql/v13/providers/jamf"},"siteName":{"name":"siteName","type":"\u0007","title":"Name of the site the definition belongs to","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf Pro restricted software definition","desc":"Restricted software rule that blocks or frustrates a macOS process across scoped computers. The `id` field selects a single rule, for example `jamf.restrictedSoftware(id: \"3\")`. Each rule names the `processName` it matches and the enforcement actions taken when the process runs (`killProcess`, `deleteExecutable`, and whether the user is notified). The `scope` field reports which computers the rule applies to.","private":true,"min_provider_version":"13.0.3","defaults":"name processName killProcess","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.script":{"id":"jamf.script","name":"jamf.script","fields":{"categoryId":{"name":"categoryId","type":"\u0007","is_mandatory":true,"title":"ID of the category assigned to the script","provider":"go.mondoo.com/mql/v13/providers/jamf"},"categoryName":{"name":"categoryName","type":"\u0007","is_mandatory":true,"title":"Name of the category assigned to the script","provider":"go.mondoo.com/mql/v13/providers/jamf"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Script ID","provider":"go.mondoo.com/mql/v13/providers/jamf"},"info":{"name":"info","type":"\u0007","is_mandatory":true,"title":"Administrator-facing information shown for the script","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the script","provider":"go.mondoo.com/mql/v13/providers/jamf"},"notes":{"name":"notes","type":"\u0007","is_mandatory":true,"title":"Administrator-facing notes attached to the script","provider":"go.mondoo.com/mql/v13/providers/jamf"},"osRequirements":{"name":"osRequirements","type":"\u0007","is_mandatory":true,"title":"Operating system requirements that must be met to run the script","provider":"go.mondoo.com/mql/v13/providers/jamf"},"parameters":{"name":"parameters","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Labeled runtime parameters passed to the script","desc":"Keyed by parameter slot (parameter4 through parameter11); each value is the administrator-assigned label for that positional argument.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"priority":{"name":"priority","type":"\u0007","is_mandatory":true,"title":"Stage at which the script runs","desc":"One of Before, After, or At Reboot.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"scriptContents":{"name":"scriptContents","type":"\u0007","is_mandatory":true,"title":"Shell contents of the script","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf Pro script","desc":"Script available for deployment through Jamf Pro policies. The `id` field selects a single script, for example `jamf.script(id: \"12\")`. Each script exposes its shell contents, the execution priority (Before, After, or At Reboot), operating system requirements, and the labeled runtime parameters that policies pass in.","private":true,"min_provider_version":"13.0.3","defaults":"name priority","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.ssoSettings":{"id":"jamf.ssoSettings","name":"jamf.ssoSettings","fields":{"configurationType":{"name":"configurationType","type":"\u0007","is_mandatory":true,"title":"Active SSO configuration type","desc":"One of SAML, OIDC, or OIDC_WITH_SAML. Tells you which set of protocol-specific fields on this resource will be populated.","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/v13/providers/jamf"},"enrollmentSsoForAccountDrivenEnrollmentEnabled":{"name":"enrollmentSsoForAccountDrivenEnrollmentEnabled","type":"\u0004","is_mandatory":true,"title":"Whether account-driven enrollment uses SSO","provider":"go.mondoo.com/mql/v13/providers/jamf"},"entityId":{"name":"entityId","type":"\u0007","is_mandatory":true,"title":"SAML entity ID for the SSO provider","provider":"go.mondoo.com/mql/v13/providers/jamf"},"groupAttributeName":{"name":"groupAttributeName","type":"\u0007","is_mandatory":true,"title":"Name of the SAML group attribute used","provider":"go.mondoo.com/mql/v13/providers/jamf"},"groupEnrollmentAccessEnabled":{"name":"groupEnrollmentAccessEnabled","type":"\u0004","is_mandatory":true,"title":"Whether group enrollment access is enabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"idpProviderType":{"name":"idpProviderType","type":"\u0007","is_mandatory":true,"title":"SAML identity provider type","desc":"One of ADFS, OKTA, GOOGLE, SHIBBOLETH, ONELOGIN, PING, CENTRIFY, AZURE, or OTHER.","provider":"go.mondoo.com/mql/v13/providers/jamf"},"idpUrl":{"name":"idpUrl","type":"\u0007","is_mandatory":true,"title":"SAML identity provider URL","provider":"go.mondoo.com/mql/v13/providers/jamf"},"oidcJamfIdAuthenticationEnabled":{"name":"oidcJamfIdAuthenticationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Jamf ID authentication is enabled for OIDC","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/v13/providers/jamf"},"oidcUserMapping":{"name":"oidcUserMapping","type":"\u0007","is_mandatory":true,"title":"OIDC user mapping mode","desc":"One of USERNAME or EMAIL. Null when configurationType is SAML.","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/v13/providers/jamf"},"oidcUsernameAttributeClaimMapping":{"name":"oidcUsernameAttributeClaimMapping","type":"\u0007","is_mandatory":true,"title":"OIDC claim used as the username attribute","min_provider_version":"13.0.2","provider":"go.mondoo.com/mql/v13/providers/jamf"},"sessionTimeout":{"name":"sessionTimeout","type":"\u0005","is_mandatory":true,"title":"Session timeout in minutes (SAML only)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"ssoBypassAllowed":{"name":"ssoBypassAllowed","type":"\u0004","is_mandatory":true,"title":"Whether bypassing SSO is allowed","provider":"go.mondoo.com/mql/v13/providers/jamf"},"ssoEnabled":{"name":"ssoEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SSO is enabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"ssoForEnrollmentEnabled":{"name":"ssoForEnrollmentEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SSO is enabled for enrollment","provider":"go.mondoo.com/mql/v13/providers/jamf"},"ssoForMacOsSelfServiceEnabled":{"name":"ssoForMacOsSelfServiceEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SSO is enabled for macOS Self Service","provider":"go.mondoo.com/mql/v13/providers/jamf"},"tokenExpirationDisabled":{"name":"tokenExpirationDisabled","type":"\u0004","is_mandatory":true,"title":"Whether token expiration is disabled (SAML only)","provider":"go.mondoo.com/mql/v13/providers/jamf"},"userAttributeEnabled":{"name":"userAttributeEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the SAML user attribute is enabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"userAttributeName":{"name":"userAttributeName","type":"\u0007","is_mandatory":true,"title":"Name of the SAML user attribute used","provider":"go.mondoo.com/mql/v13/providers/jamf"},"userMapping":{"name":"userMapping","type":"\u0007","is_mandatory":true,"title":"SAML user mapping mode","desc":"One of USERNAME or EMAIL. Null when configurationType is OIDC.","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Single Sign-On (SSO) settings for Jamf Pro","desc":"Top-level fields apply regardless of which identity protocol is in use. SAML-specific fields (sessionTimeout, idpUrl, idpProviderType, userAttributeEnabled, userAttributeName, userMapping, tokenExpirationDisabled, groupAttributeName, entityId) are null when the tenant is configured for OIDC only. OIDC-specific fields (oidcUserMapping, oidcJamfIdAuthenticationEnabled, oidcUsernameAttributeClaimMapping) are null when the tenant is configured for SAML only. Use `configurationType` to branch.","private":true,"min_provider_version":"13.0.0","defaults":"ssoEnabled configurationType","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.user":{"id":"jamf.user","name":"jamf.user","fields":{"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"User ID","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Username","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"title":"Jamf Pro user summary","desc":"User account known to Jamf Pro, as returned when listing every user with `jamf.users`. Each entry carries the account's numeric `id` and its `name` (username), enough to inventory the user population or feed a lookup. For the full record (email, full name, phone, position, and custom-photo state) select a single user by name with `jamf.userByName(name: \"jsmith\")`.","private":true,"min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/jamf"},"jamf.userByName":{"id":"jamf.userByName","name":"jamf.userByName","fields":{"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Email address of the user","provider":"go.mondoo.com/mql/v13/providers/jamf"},"enableCustomPhoto":{"name":"enableCustomPhoto","type":"\u0004","is_mandatory":true,"title":"Whether the user has a custom photo enabled","provider":"go.mondoo.com/mql/v13/providers/jamf"},"fullName":{"name":"fullName","type":"\u0007","is_mandatory":true,"title":"Full name of the user","provider":"go.mondoo.com/mql/v13/providers/jamf"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Unique ID of the user","provider":"go.mondoo.com/mql/v13/providers/jamf"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Jamf username","provider":"go.mondoo.com/mql/v13/providers/jamf"},"phone":{"name":"phone","type":"\u0007","is_mandatory":true,"title":"Phone number associated with the user","provider":"go.mondoo.com/mql/v13/providers/jamf"},"position":{"name":"position","type":"\u0007","is_mandatory":true,"title":"Job position of the user","provider":"go.mondoo.com/mql/v13/providers/jamf"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"Jamf Pro user lookup by username","desc":"Single Jamf user identified by username, covering full name, email, phone, position, and whether a custom photo is enabled. The `name` field selects the user, for example `jamf.userByName(name: \"jsmith\") { email position }`. Use `jamf.users` when you need to iterate every user instead of looking one up by name.","min_provider_version":"13.0.0","defaults":"name email fullName","provider":"go.mondoo.com/mql/v13/providers/jamf"}}}