jamf_Update_Roles_Assigned_To_Self

Represents an API client possessing the ‘Update API Roles’ permission which allows updating existing API roles with any permissions, including roles assigned to itself.

Edge Schema

• Source: jamf_ApiClient, jamf_DisabledApiClient
• Destination: jamf_Tenant
• Traversable: ✅

General Information

The traversable jamf_Update_Roles_Assigned_To_Self edge represents an API client possessing the ‘Update API Roles’ privilege which allows updating existing API roles with any permissions, including roles assigned to itself. Since the source already has an assigned role, it can escalate its own privileges by modifying its own role definitions.