Description
Administrator access to Elevate is managed directly from Jamf Account using a custom role.
If a user from your organization tries to log in to Elevate but has not been granted access they will see 'Your user does not have access to the Elevate application. Reach out to your organization's support team to help resolve this."
Pre-requisites
In order to manage Elevate users:
the SLASA must be accepted in Jamf Account.
you need to log in with a Jamf Account user associated with your organization that has a Jamf Account role allowing them to manage users and roles.
Creating the Role in Jamf Account
Log in to Jamf Account with the email associated with your Jamf subscription purchase.
Go to Organization > Roles & privileges and choose Create custom role +.
Provide a name and description for the role which indicate it's for Elevate use.
(Optional) If you've already added a Jamf Account SSO Connection to your identity provider, you can assign the role to groups using the IdP groups field.
Click the dropdown box for Role Scope and choose Environment.
Ensure the Elevate environment is selected.
Select what access you want the role to provide:
Check the box for View if you want to administrator to be able to log in but not make changes.
Check the box for View and All for a full administrator.
Click Create role.
Adding or removing users to Elevate
Once the custom role is created, we can assign/remove the role from users to manage access.
Log in to Jamf Account or if you are in Elevate go to Settings and click Manage Users.
Go to Organization > Users & contacts.
Click ⋮ for the user and select Assign Roles.
To grant access: Click the dropdown box and select the Elevate role with the correct access.
To remove access: Click the X next to the Elevate role.Click Save.