jamf_CreateAPIRoles

Represents the ability to create API roles in the Jamf tenant. Non-traversable because creating roles without the ability to create or update API integrations does not provide a credential retrieval mechanism.

Edge Schema

• Source: jamf_Account, jamf_DisabledAccount, jamf_Group, jamf_ApiClient, jamf_DisabledApiClient
• Destination: jamf_Tenant
• Traversable: ❌

General Information

The non-traversable jamf_CreateAPIRoles edge represents the ability to create API roles in the Jamf tenant. This edge is non-traversable on its own because creating roles without the ability to create or update API integrations does not enable privilege escalation.