How to Launch a Tool

Overview

RCC tools can be deployed in two main ways:

• Via a Jamf Policy: This is the most common deployment method.
• Within an Extension Attribute Script: Some tools are designed for more granular control and are used directly within an extension attribute. Tool-specific documentation (see sidebar) will provide instructions for this usage.

---

Deploying a Tool with a Jamf Policy

1. Create a New Jamf Policy

Navigate to Policies in Jamf Pro, create a new policy, and configure its general settings (e.g., name and scope).

2. Add the "Launch a Tool Script"

Under the Scripts payload, add the "Launch a Tool Script" (created during the RCC configuration).

3. Define Global and Tool-Specific Parameters

Using Temporary Admin as an example, configure the script parameters as follows:

• Parameter 4 (Global Options and Tool Name):

  TemporaryAdmin

• Parameter 5 (Tool-Specific Option - Sensitive Data):

  --encryptedCredentialsPlistPath /path/to/my/credentials.enc

• Parameter 6 (Tool-Specific Option - Sensitive Data):

  --removeGroup "Temporary Admin Privileges"

4. Create a Configuration Profile for the Tool

Create a configuration profile to specify non-sensitive, tool-specific options. Below is an example configuration profile for the Temporary Admin tool:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>action</key>
    <string>promote</string>
    <key>timeMin</key>
    <integer>5</integer>
    <key>removeGroup</key>
    <string>Temporary Admin Privileges</string>
  </dict>
</plist>

This configuration profile:

1. Specifies the action to promote the user to admin status.
2. Grants admin rights for 5 minutes.
3. Removes the user from the specified group after admin access is granted.

For detailed instructions on creating a configuration profile, refer to the How to Create a Configuration Profile guide.

Refer to the Temporary Admin Tool Documentation for more details on configuration options.

5. Deploy and Test

Save the policy and deploy it to a test device.

---

Using a Tool Within an Extension Attribute Script

Certain RCC tools are designed to be used within an extension attribute script. To set up such tools:

1. Create a New Extension Attribute:
   • Navigate to Settings > Computer Management > Extension Attributes and click New.
2. Add the Tool Invocation Script:
   • Locate the appropriate script for the tool in the tool-specific documentation.
   • Tool documentation can be accessed through the sidebar.
3. Assign the Extension Attribute:
   • Reference the extension attribute within your policies or configuration profiles as needed.

For detailed guidance, refer to the sidebar to navigate to the specific tool documentation.

---

Best Practices for Parameter Management

• Configuration Profiles for Tool-Specific Parameters: Define all tool-specific options in a configuration profile applied to the devices.
• Global Options: Place global options in the Jamf Pro script parameter fields for clarity and consistency.

---

By following these steps, you can effectively deploy and manage RCC tools within your Jamf Pro environment. Refer to the individual tool documentation for any additional details or specific requirements.