Jamf Extender

Extend Jamf interfaces to accomplish more with less clicks

Jamf Extender adds powerful inline features to Jamf Pro — available for Safari, Chrome, Edge, and Firefox. If you also use Jamf Security Cloud and Jamf Protect, device security information surfaces directly in Jamf Pro — no need to navigate away from the page. NEW IN 1.2.3 - Home Screen layout visual designer - Apps and Books license alerts and dashboard - On the fly Category creation - Device Compliance Integrations info in device record (Microsoft) - Bug fixes HOME SCREEN LAYOUT VISUAL BUILDER - "Visual Builder" button on iOS configuration profile edit pages with a Home Screen Layout payload — opens a fullscreen overlay with an iPhone or iPad mockup - Drag and drop apps between the dock, every page, and the picker pane on the right; apps already on the layout grey out so you can't add them twice - Picker pulls your mobile-device-apps inventory directly from the Jamf Pro API, plus a hardcoded Apple stock apps list and a paste-URL form for Web Clips - App Icons work for Stock and App Store. B2B or in house icons will not populate. (For performance reasons, all icons may show depending on how many apps are configured.) APPS AND BOOKS LICENSES - Apps and Books license low-balance alert pill — shows on the mobile device apps and Mac apps list pages, immediately to the left of the "New" button, whenever any app's remaining licenses fall below your configurable percent threshold (default 10% of total purchased) - Click the pill to open a drawer listing every app under the threshold with its current Remaining count; the header shows the live "{N} app(s)" total - Ad-hoc threshold tuner inside the drawer re-filters the list on the fly without changing the saved preference - Apps and Books Licenses dashboard widget — a card in the Jamf Pro dashboard's Inventory information section that surfaces low-balance Mobile and Mac apps in one place, with an expandable per-app list. Populated by background-loading the apps list pages, no API calls or extra permissions ADD CATEGORY INLINE - "+ Add Category" option pinned to the top of every category dropdown in Jamf Pro (Policies, Profiles, Apps, Patch Policies, Scripts, Packages, Restricted Software, eBooks) - Picking it opens a small modal that creates the category via the Pro API and selects it in place - Requires the "Create Categories" privilege on the API role (auto-added by Quick Setup) COMPLIANCE INTEGRATIONS (Microsoft) - A new "Compliance Integrations" sidenav tab on every computer and mobile device detail page shows the device's conditional-access compliance status — applicable, state (Compliant / Non Compliant), vendor, and vendor device ID - Add a "Compliance Device ID" column to Advanced Computer Searches and Advanced Mobile Searches via the Add Column dropdown - Toggle the tab on/off in Preferences API ROLE PRIVILEGE PICKER - Resource-grouped CRUD grid with per-resource Create/Read/Update/Delete checkboxes — much faster than Jamf Pro's text-only combobox search - Category filter pills (All, Selected, Create, Read, Update, Delete, Other) to narrow the list at a glance - Paste a comma- or newline-separated list of privilege names to filter and highlight exactly those entries, then click "Select From Input" to toggle them all on at once — ideal for replicating a role across instances - "Select All Visible" and "Deselect All" for bulk operations on whatever's currently filtered - "Save Role" writes selected privileges directly via the Jamf Pro API (POST for new, PUT for existing) without needing to click through the native save flow DASHBOARD HEALTH STATUS - Inline "Health:" indicator next to the Jamf Pro version on the dashboard - Polls Jamf Pro's built-in /api/v1/health-status endpoint and reads the oneMinute probe-success ratio per health group - Shows "Healthy" when every group is at 100% over the last minute, "{N} degraded" when any are below, or "Unavailable" if the endpoint doesn't respond - Expandable per-group breakdown with color-coded percentages so you can pinpoint affected subsystems without leaving the dashboard - Reflects Jamf Pro's own internal service probes — does not cover certificate expiry, disk space, backup state, or patch feed freshness PRIVACY & SECURITY - macOS Keychain integration — API credentials are stored encrypted in macOS Keychain, shared across all browsers via the Jamf Extender Safari app - Safari: Keychain access is built-in, no extra setup needed - Chrome, Edge, Firefox: open the Jamf Extender Safari app and click "Set Up Other Browsers" to enable Keychain access, then restart your browser - Credentials saved in any browser are immediately available in all other browsers through the shared Keychain - Existing credentials in browser storage are automatically migrated to Keychain - Falls back to browser storage if the Safari app is not installed - API clients are created with read-only permissions - Write operations (convert/delete/MUT) use your existing Jamf Pro browser session, not the API client SMART GROUP INTELLIGENCE - Hover over any smart group name or device count to instantly preview its device membership - Expand "Where It's Used" drawers to see every policy, profile, restricted software rule, app, patch policy, eBook, app installer, webhook, and blueprint that targets, limits, or excludes a group - Spot groups with email notifications enabled or nested group criteria at a glance - Convert unused smart groups to advanced searches or delete them directly - Works for both computer and mobile device smart groups CONFIGURATION PROFILES (macOS + iOS) - Expand inline payload drawers showing every configured payload with human-friendly labels - Compare two or more profiles side-by-side to see shared vs. unique payloads and scope differences - Hover over Scope to see targeted groups with device counts, limitations, and exclusions - Hover over Completed/Pending/Failed to see deployment details with device names and serials BLUEPRINTS - Hover over any blueprint name to see all configured settings — DDM profiles, passcode policies, software update settings, and more - Hover over the "Scoped to" text to see which groups and devices are in scope, with an Export CSV button for device lists POLICY SCOPE & RISK ANALYSIS - Hover over any policy's Scope column to see full targeting details - A risk report bar flags potentially dangerous policies — Ongoing frequency with Recurring Check-in trigger, especially when scoped to All Computers APPLICATION USAGE & UNUSED APP SEARCH - Run aggregated application usage reports across any Advanced Computer Search with flexible time ranges - Find devices that have NOT used a specific application — export results as CSV for cleanup workflows - Save and reload search configurations per Jamf Pro instance MOBILE DEVICE APPS — XML VALIDATOR - Live XML/Plist syntax assistant on the mobile device app detail page - Validates bracket balance, tag matching, plist structure, and more as you type - Warns about leading/trailing whitespace and empty values that could cause unexpected behavior - Line number gutter for easy reference — no credentials required MASS UPDATE TOOL (MUT) - Upload a CSV to update Jamf Pro inventory records in bulk — computers, mobile devices, users, static groups, and prestage enrollments - Download CSV templates with optional pre-fill: "Pre-filled" fetches real serial numbers or usernames from your instance; "Blank" downloads an empty template - Preview records before submitting, track progress in real time, cancel mid-batch, and download a results log - Accessible from both the extension popup and the inline sidebar settings panel JAMF SECURITY CLOUD INTEGRATION - View device risk, status, enrollment, and DNS activity inline on computer and mobile device detail pages - See per-software vulnerability breakdowns with individual CVEs linked to NVD - Color-coded app risk badges (HIGH/MEDIUM/LOW) on the mobile device apps list - Threat category and threat subject details per device JAMF PROTECT INTEGRATION - View connection status, plan name, and agent version inline on computer detail pages - Alert summary grid showing High/Medium/Low severity counts across 24h, 7d, and 30d time windows CUSTOM DOMAIN SUPPORT - Works out of the box with *.jamfcloud.com instances - Self-hosted or custom domain Jamf Pro instances (e.g., jss.company.com:8443, company.com) are supported with a one-time setup: 1. Navigate to your self-hosted Jamf Pro page and click the Jamf Extender icon 2. Click "Grant Access to Jamf Extender on This Site" and approve the browser prompt (the extension will close) 3. Re-open the extension and click "Add as Jamf Pro Instance" 4. Run Quick Setup to create API credentials for the new instance - The access grant is permanent — you only approve once per domain, and it persists across browser restarts - All features work identically on custom domains — smart groups, profiles, policies, blueprints, MUT, and more QUICK SETUP - Quick setup for Jamf Pro, Security Cloud, and Protect — the extension creates read-only API credentials automatically using your active browser session - Portal Groups link your Jamf Pro instance to Security Cloud and Protect for cross-platform device lookups - Supports multiple instances/environments of each product QUALITY OF LIFE - Toggle a status pill to show extension health at a glance - Update notifications — the pill turns blue when a newer version is available, with instructions to update via Extensions (toggleable) - Nav bar shortcuts — bookmark any Jamf Pro page as a quick-access button in the top nav - Sidebar settings panel — access all settings without leaving the Jamf Pro interface - Animated shimmer underlines highlight interactive elements (toggleable) - Hide dashboard setup task cards to reduce clutter - Customize the nav bar color per Jamf Pro instance to tell environments apart Works on all Jamf Pro *.jamfcloud.com instances and self-hosted/custom domain instances. Requires a Jamf Pro login and one-time Quick Setup per instance. Available for Safari, Chrome, Edge, and Firefox on macOS. LICENSE Jamf Concept Projects Use Agreement - https://resources.jamf.com/documents/jamf-concept-projects-use-agreement.pdf