Jamf Extender enhances the Jamf Pro portal. Instead of jumping between tabs, running scripts, or launching standalone tools to check scope, compare profiles, spot risky policies, or validate app configs, you can now just hover or click, and the answer is right there. See Protect and Security Cloud content within a device record, in a single page. Supports Safari, Chrome, Edge, and Firefox.
Features
Smart Groups (Computer + Mobile Device)
- Inline device table on detail pages with serial numbers (and Wi-Fi MAC for mobile) and pagination
- Hover popovers preview group membership directly from the list page
- "Where It's Used" drawer lists every policy, profile, app, patch policy, eBook, app installer, webhook, or blueprint that targets, limits, or excludes the group
- Convert unused groups to advanced searches or delete them directly
- Badges flag groups with email notifications enabled or nested group criteria
Configuration Profiles (macOS + iOS)
- Inline payloads drawer with human-friendly labels for every configured payload (Wi-Fi, VPN, Restrictions, Certificates, SCEP, PPPC, etc.)
- Side-by-side compare of two or more profiles showing scope summary and shared vs. unique payloads
- Scope hover popover with targeted groups, individual devices, limitations, exclusions, and All Computers/Devices flags
- Deployment status hover popovers show device names and serials behind Completed/Pending/Failed counts
Policies
- Scope hover popover with targets, limitations, and exclusions as clickable links
- Risk Report bar flags Ongoing + Recurring Check-in policies — Caution for specific scope, Warning when scoped to All Computers
Blueprints
- Settings hover popover lists configured DDM profiles, passcode policies, software update settings, and more with human-readable names
- Scope hover popover shows targeted smart groups with device membership, plus an Export CSV for full device-level reports
Licensed Software
- Aggregated Application Usage report across any Advanced Computer Search and time range, sortable and filterable
- Unused App Search finds devices that have not run a given app; save search configurations and export results as CSV
Mobile Device Apps — XML Validator
- Live AppConfig plist validation as you type: bracket/quote balance, tag matching, plist structure, escaping, and whitespace
- Line-number gutter plus per-issue severity, line numbers, and suggested fixes; runs entirely client-side
Change Management Logs
- Inline filter bar above the native table with per-column inputs and an Action dropdown (live, AND logic)
- Live matching-row counter and a single Clear button
Jamf Security Cloud
- Quick Setup auto-generates API keys from your active Security Cloud session
- Portal Groups link each Jamf Pro instance to a Security Cloud customer ID and/or a Jamf Protect origin
- Inline Security Cloud panel on mobile device detail pages with risk, status, enrollment, and DNS activity
- Per-software vulnerability breakdown on computer and mobile device pages with linked CVEs
- High/Medium/Low app risk badges on the mobile device apps list
- Panel visibility toggle in Preferences
Jamf Protect
- Quick Setup creates a read-only API client from your browser session
- Inline Protect panel on computer detail pages with connection status, plan, agent version, and High/Medium/Low alert counts across 24h, 7d, and 30d
- Panel visibility toggle in Preferences
Mass Update Tool (MUT)
- Bulk CSV updates for Computers, Mobile Devices, and Users (attributes + extension attributes), plus Static Group and Prestage Enrollment scope membership
- Pre-filled or blank CSV templates for all 8 update types
- Per-record preview before submit (
CLEAR!clears a value, blank skips) - Background processing survives closing the popup; cancel or resume a running batch
- Downloadable results log with per-record success and error details
Custom Jamf Pro Domains
- One-time access grant enables all features on self-hosted or custom-domain instances (e.g.,
jamfpro.mycompany.com) - Add and remove custom domains from the popup or sidebar; grant persists across browser restarts
macOS Keychain Integration
- Credentials stored encrypted in the macOS Keychain via the Jamf Extender Safari app
- Shared across Safari, Chrome, Edge, and Firefox through a single Keychain entry
- Automatic migration from browser storage on first launch; falls back to browser storage when the Safari app is not installed
General
- Persistent status pill across Jamf Pro and Security Cloud pages showing extension state (awaiting login, needs config, credentials expired, permissions needed, active)
- Nav bar shortcuts bookmark any Jamf Pro page as a pill button in the top nav, per-instance and reorderable
- Sidebar settings panel inside Jamf Pro with MUT, Preferences, Shortcuts, Portal Groups, and Configurations
- Pre-scan permission checks block runs when the API client is missing required privileges, with a clear retry link
- Per-instance nav bar color, toggleable shimmer underlines, hide-dashboard-setup-cards, and auto-scan-group-usage preferences
