-
Notifications
You must be signed in to change notification settings - Fork 0
How to Create a Configuration Profile
Configuration profiles define non-sensitive, tool-specific parameters for RCC tools, enabling streamlined deployments. This guide demonstrates how to create a profile using Temporary Admin as an example.
-
Open any XML-compatible text editor (e.g., Visual Studio Code, Sublime Text).
-
Use the following example configuration profile as a base:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>action</key> <string>promote</string> <key>timeMin</key> <integer>5</integer> <key>removeGroup</key> <string>Temporary Admin Privileges</string> </dict> </plist>
-
Replace placeholder values to suit your deployment:
-
action: Defines the operation, such aspromoteto grant admin rights ordemoteto revoke them (string). -
timeMin: Specifies the duration of admin rights in minutes (integer). For example,5grants admin rights for 5 minutes. -
removeGroup: Defines the group from which the user will be removed after admin access is granted (string). - Refer to the Plist Structure section below for guidance on supported data types.
-
Plist files store data in a structured format as key-value pairs. Each <key> specifies a setting, and the value defines its data type:
-
Strings:
<string>for text values.<key>ExampleString</key> <string>Example Value</string>
-
Integers:
<integer>for numerical data.<key>ExampleInteger</key> <integer>42</integer>
-
Booleans:
<true/>or<false/>for binary settings.<key>ExampleBoolean</key> <true/>
-
Dictionaries: Group multiple key-value pairs:
<key>ExampleDict</key> <dict> <key>NestedKey</key> <string>NestedValue</string> </dict>
-
Arrays: Contain ordered lists of values:
<key>ExampleArray</key> <array> <string>Value1</string> <string>Value2</string> </array>
Use this structure to define and organize tool-specific parameters effectively.
-
Encrypt
Encrypt any string. -
App Setup Helper
Enables Screen Recording for apps. -
Break Glass Admin
Manages emergency admin accounts. -
Edit User Profile
Updates building and department info. -
FileVault Token Revoker
Removes FileVault tokens. -
Get Backdoor Admin Password From Keychain
Retrieves backdoor admin passwords. -
List All FileVault Enabled Users
Lists FileVault-enabled users. -
Rapid Response
Triggers scripts immediately. -
Rename Computer
Renames Macs via Jamf. -
Reset Jamf Connect Login Screen
Switches to macOS login. -
Secure Token Sharing Tool
Grants secure tokens. -
Self Service Email
Creates pre-filled emails. -
Temporary Admin
Grants temporary admin rights. -
Update User Info
Syncs user data with Jamf. -
Upload Jamf Logs
Uploads log files to Jamf. -
User Privilege Management
Adjusts user roles. -
Change Static Group Membership
Change Static Group Membership -
Fetch Database
Fetch Database