Jamf-Concepts/terraform-provider-jamfplatform v0.18.1

on GitHub

This release adds Jamf Pro resource coverage to the provider under the jamfplatform_pro_*
namespace. The existing Jamf Platform Services constructs (Blueprints, Compliance Benchmarks, Device
Groups, Devices, Device Actions) are unchanged. The new resources use the same provider block and
credentials already in use for Platform Services.

The additions are built against Jamf Pro 11.29.0. Resources that depend on newer Jamf Pro
endpoints declare their own minimum version and return an error on older tenants; the rest emit an
advisory warning below the target version and otherwise operate normally. Platform Services
constructs target continuously-deployed microservices and have no version requirement.

The Jamf Platform API is in public beta. Schemas and behaviour of the jamfplatform_pro_*
namespace may change.

Summary of changes

Resources added

Grouped by area:

Organisation & inventory

pro_building · pro_department · pro_category · pro_site · pro_network_segment ·
pro_inventory_preload_record · pro_computer_inventory_collection_settings

Computer management

pro_policy · pro_script · pro_package · pro_macos_configuration_profile ·
pro_disk_encryption_configuration · pro_directory_binding · pro_dock_item · pro_printer ·
pro_restricted_software · pro_licensed_software · pro_allowed_file_extension ·
pro_removable_mac_address · pro_macos_onboarding

Mobile device management

pro_mobile_device_configuration_profile · pro_mobile_device_app ·
pro_mobile_device_provisioning_profile

Smart groups & extension attributes

pro_user_group · pro_computer_extension_attribute · pro_mobile_device_extension_attribute ·
pro_user_extension_attribute
(computer/device smart & static groups remain under the existing jamfplatform_device_group.)

Advanced searches

pro_advanced_computer_search · pro_advanced_mobile_device_search ·
pro_advanced_user_search · pro_advanced_volume_purchasing_content_search

Enrollment

pro_computer_prestage_enrollment · pro_mobile_device_prestage_enrollment ·
pro_automated_device_enrollment · pro_user_initiated_enrollment_settings ·
pro_re_enrollment_settings · pro_enrollment_customization · pro_service_discovery_enrollment ·
pro_mobile_device_enrollment_profile · pro_computer_invitation · pro_mobile_device_invitation ·
pro_return_to_service

App & content distribution

pro_app_installer · pro_app_installer_settings · pro_mac_app_store_app · pro_ebook ·
pro_volume_purchasing_location · pro_volume_purchasing_notification · pro_vpp_assignment ·
pro_vpp_invitation · pro_app_request_form_field · pro_app_request_settings

Patch management

pro_patch_policy · pro_patch_software_title · pro_patch_external_source

Distribution points

pro_cloud_distribution_point · pro_file_share_distribution_point

PKI & certificates

pro_pki_adcs · pro_pki_digicert · pro_pki_venafi ·
pro_pki_json_web_token_configuration · pro_supervision_identity

Identity, directory & SSO

pro_ldap_server · pro_cloud_identity_provider · pro_sso_settings · pro_sso_failover_url

Access & API control

pro_account · pro_account_group · pro_api_role · pro_api_client ·
pro_access_management_settings

Integrations

pro_jamf_connect · pro_jamf_protect · pro_jamf_teacher_settings · pro_jamf_parent_settings ·
pro_gsx_connection_settings · pro_smtp_server · pro_webhook

Self Service

pro_self_service_plus_settings · pro_self_service_macos_settings ·
pro_self_service_branding_macos · pro_self_service_branding_ios ·
pro_self_service_branding_image

Tenant settings

pro_activation_code · pro_computer_check_in_settings · pro_mdm_profile_settings ·
pro_local_admin_password_settings (LAPS) · pro_login_page_settings ·
pro_impact_alert_notification_settings · pro_managed_software_update

Classroom & beacons

pro_class · pro_ibeacon

Resource-attached assets

pro_icon

Most resources have a matching data source for read-only lookups. Many also have a plural data
source (e.g. pro_categories, pro_buildings, pro_scripts, pro_api_clients) and a list
resource for filtered enumeration.

Actions added

Fire-and-forget jamfplatform_pro_* actions, runnable from lifecycle.action_trigger:

• MDM device commands — pro_device_lock, pro_clear_passcode,
  pro_clear_restrictions_password, pro_enable_lost_mode, pro_disable_lost_mode,
  pro_play_lost_mode_sound, pro_enable_remote_desktop, pro_disable_remote_desktop,
  pro_send_blank_push, pro_renew_mdm_profile, pro_log_out_user, pro_unlock_user_account,
  pro_set_auto_admin_password
• Maintenance — pro_flush_policy_logs, pro_flush_mdm_commands,
  pro_redeploy_management_framework
• Patch — pro_retry_patch_policy_logs
• Managed software updates — pro_managed_software_update_plan,
  pro_managed_software_update_abandon
• Users — pro_delete_user

Requirements

• Terraform ≥ 1.13.0. List resources use the Terraform query-file workflow (.tfquery.hcl) and
  require Terraform ≥ 1.14.
• Go ≥ 1.26 (to build from source).
• tenant_id must be set, in the provider block or via JAMFPLATFORM_TENANT_ID. It scopes
  every API request across both Platform Services and Jamf Pro.

provider "jamfplatform" {
  base_url      = "https://us.apigw.jamf.com" # or eu.apigw.jamf.com / apac.apigw.jamf.com
  client_id     = "example-client-id"
  client_secret = "example-client-secret"
  tenant_id     = "00000000-0000-0000-0000-000000000000"
}

A new min_request_interval_ms provider option (default 100) paces outbound traffic through the
shared client to reduce rate-limit responses on large parallel applies. Lower it for speed, raise it
if you see 429s, or set 0 to disable.

Upgrade notes

• Upgrading from v0.17.0 is non-breaking for existing configurations. No Platform Services resource
  was renamed or removed; the Jamf Pro resources are additive. Run terraform init -upgrade.
• If you tracked the v0.18.0-rc.* pre-releases, several Pro resources had attribute renames and
  write-only password migrations during the release candidates (to align with Jamf Pro admin-UI
  labels and to avoid storing password material in state). Re-check plans on any RC configs.
• List-resource examples are now .tfquery.hcl files, matching Terraform's query workflow.

Credits

This provider builds on Deployment Theory's
terraform-provider-jamfpro,
first released in early 2024 and the most widely adopted community Terraform provider for Jamf.

Documentation: Terraform Registry