Jamf Extender

Jamf Extender adds powerful inline features to Jamf Pro — available for Safari, Chrome, Edge, and Firefox. If you also use Jamf Security Cloud and Jamf Protect, device security information surfaces directly in Jamf Pro — no need to navigate away from the page.

NEW IN 1.2.2

• Instance Label — a global toggle plus background and text color pickers that auto-populates a pill with the instance name across every Jamf Pro you manage (stacks with the per-origin Nav Bar Label)
• Deeplinks in dropdowns for packages, scripts and printers in All Policies dashboard
• Extension Attributes in the column picker on computer and mobile-device search results
• Column picker + CSV export now works on advanced searches, all devices search, and smart groups (anywhere there's a table of devices)
• API Role Privilege Picker pre-checks existing privileges on edit pages and navigates back to the view state after Save
• Bug fixes

SMART GROUP INTELLIGENCE

• Hover over any smart group name or device count to instantly preview its device membership
• Expand "Where It's Used" drawers to see every policy, profile, restricted software rule, app, patch policy, eBook, app installer, webhook, and blueprint that targets, limits, or excludes a group
• Spot groups with email notifications enabled or nested group criteria at a glance
• Convert unused smart groups to advanced searches or delete them directly
• Works for both computer and mobile device smart groups

CONFIGURATION PROFILES (macOS + iOS)

• Expand inline payload drawers showing every configured payload with human-friendly labels
• Compare two or more profiles side-by-side to see shared vs. unique payloads and scope differences
• Hover over Scope to see targeted groups with device counts, limitations, and exclusions
• Hover over Completed/Pending/Failed to see deployment details with device names and serials

BLUEPRINTS

• Hover over any blueprint name to see all configured settings — DDM profiles, passcode policies, software update settings, and more
• Hover over the "Scoped to" text to see which groups and devices are in scope, with an Export CSV button for device lists

POLICY SCOPE & RISK ANALYSIS

• Hover over any policy's Scope column to see full targeting details
• A risk report bar flags potentially dangerous policies — Ongoing frequency with Recurring Check-in trigger, especially when scoped to All Computers
• Disabled policies that match the risky configuration are counted in their own neutral pill separate from caution/warning

SEARCH RESULTS — COLUMN PICKER + CSV EXPORT

• Computer and mobile device search results (both advanced and basic) get a "Columns" picker and "Export CSV" button in the toolbar
• Add inventory fields from General / Hardware / User & Location / Purchasing / Security — and every Extension Attribute defined in the instance — as extra columns
• Drag to reorder, uncheck to hide, then export the table as CSV in the current column order

APPLICATION USAGE & UNUSED APP SEARCH

• Run aggregated application usage reports across any Advanced Computer Search with flexible time ranges
• Find devices that have NOT used a specific application — export results as CSV for cleanup workflows
• Save and reload search configurations per Jamf Pro instance

MOBILE DEVICE APPS — XML VALIDATOR

• Live XML/Plist syntax assistant on the mobile device app detail page
• Validates bracket balance, tag matching, plist structure, and more as you type
• Warns about leading/trailing whitespace and empty values that could cause unexpected behavior
• Line number gutter for easy reference — no credentials required

API ROLE PRIVILEGE PICKER

• Resource-grouped CRUD grid with per-resource Create/Read/Update/Delete checkboxes — much faster than Jamf Pro's text-only combobox search
• Category filter pills (All, Selected, Create, Read, Update, Delete, Other) to narrow the list at a glance
• Paste a comma- or newline-separated list of privilege names to filter and highlight exactly those entries, then click "Select From Input" to toggle them all on at once — ideal for replicating a role across instances
• "Select All Visible" and "Deselect All" for bulk operations on whatever's currently filtered
• "Save Role" writes selected privileges directly via the Jamf Pro API (POST for new, PUT for existing) without needing to click through the native save flow

DASHBOARD HEALTH STATUS

• Inline "Health:" indicator next to the Jamf Pro version on the dashboard
• Polls Jamf Pro's built-in /api/v1/health-status endpoint and reads the oneMinute probe-success ratio per health group
• Shows "Healthy" when every group is at 100% over the last minute, "{N} degraded" when any are below, or "Unavailable" if the endpoint doesn't respond
• Expandable per-group breakdown with color-coded percentages so you can pinpoint affected subsystems without leaving the dashboard
• Reflects Jamf Pro's own internal service probes — does not cover certificate expiry, disk space, backup state, or patch feed freshness

MASS UPDATE TOOL (MUT)

• Upload a CSV to update Jamf Pro inventory records in bulk — computers, mobile devices, users, static groups, and prestage enrollments
• Download CSV templates with optional pre-fill: "Pre-filled" fetches real serial numbers or usernames from your instance; "Blank" downloads an empty template
• Preview records before submitting, track progress in real time, cancel mid-batch, and download a results log
• Accessible from both the extension popup and the inline sidebar settings panel

JAMF SECURITY CLOUD INTEGRATION

• View device risk, status, enrollment, and DNS activity inline on computer and mobile device detail pages
• See per-software vulnerability breakdowns with individual CVEs linked to NVD
• Color-coded app risk badges (HIGH/MEDIUM/LOW) on the mobile device apps list
• Threat category and threat subject details per device

JAMF PROTECT INTEGRATION

• View connection status, plan name, and agent version inline on computer detail pages
• Alert summary grid showing High/Medium/Low severity counts across 24h, 7d, and 30d time windows

NAV BAR LABEL + INSTANCE LABEL

• Pin a custom text label (e.g. PRODUCTION, STAGING) next to the nav icon cluster, per Jamf Pro instance
• Or enable the Instance Label toggle — a separate pill that auto-populates every instance you manage with its hostname prefix, with global background and text color pickers
• Both labels can be shown at the same time

CUSTOM DOMAIN SUPPORT

• Works out of the box with *.jamfcloud.com instances
• Self-hosted or custom domain Jamf Pro instances (e.g., jss.company.com:8443, company.com) are supported with a one-time setup:
• Navigate to your self-hosted Jamf Pro page and click the Jamf Extender icon
• Click "Grant Access to Jamf Extender on This Site" and approve the browser prompt (the extension will close)
• Re-open the extension and click "Add as Jamf Pro Instance"
• Run Quick Setup to create API credentials for the new instance
• The access grant is permanent — you only approve once per domain, and it persists across browser restarts
• All features work identically on custom domains — smart groups, profiles, policies, blueprints, MUT, and more

QUICK SETUP

• Quick setup for Jamf Pro, Security Cloud, and Protect — the extension creates read-only API credentials automatically using your active browser session
• Portal Groups link your Jamf Pro instance to Security Cloud and Protect for cross-platform device lookups
• Supports multiple instances/environments of each product

QUALITY OF LIFE

• Toggle a status pill to show extension health at a glance
• Update notifications — the pill turns blue when a newer version is available, with instructions to update via Extensions (toggleable)
• Nav bar shortcuts — bookmark any Jamf Pro page as a quick-access button in the top nav
• Sidebar settings panel — access all settings without leaving the Jamf Pro interface
• Animated shimmer underlines highlight interactive elements (toggleable)
• Hide dashboard setup task cards to reduce clutter
• Customize the nav bar color per Jamf Pro instance to tell environments apart

PRIVACY & SECURITY

• macOS Keychain integration — API credentials are stored encrypted in macOS Keychain, shared across all browsers via the Jamf Extender Safari app
• Safari: Keychain access is built-in, no extra setup needed
• Chrome, Edge, Firefox: open the Jamf Extender Safari app and click "Set Up Other Browsers" to enable Keychain access, then restart your browser
• Credentials saved in any browser are immediately available in all other browsers through the shared Keychain
• Existing credentials in browser storage are automatically migrated to Keychain
• Falls back to browser storage if the Safari app is not installed
• API clients are created with read-only permissions
• Write operations (convert/delete/MUT) use your existing Jamf Pro browser session, not the API client

Works on all Jamf Pro *.jamfcloud.com instances and self-hosted/custom domain instances. Requires a Jamf Pro login and one-time Quick Setup per instance. Available for Safari, Chrome, Edge, and Firefox on macOS.

LICENSE

Jamf Concept Projects Use Agreement - https://resources.jamf.com/documents/jamf-concept-projects-use-agreement.pdf