Modifying Global Configuration Items

Method for maintaining global configuration items in production JAMF environment

This document refers to the following global settings. These Items are limited to the LGA's.:

• Packages
• Scripts
• Printers
• Directory Bindings
• Disk Encryption Configurations
• Dock Items
• Configurations

To prevent accidental modification of one unit's settings by another unit's admins, LGA's are not able to update (modify) global settings in the production JAMF environment. Although UFIT is continuing to research middleware options that will allow more restrictive access to global settings, a middleware solution will not be in place at time of go-live.

The TEST JAMF environment allow LGA's to read, create and update the 7 items listed above. There is no "delete" in either environment. We have confirmed with JAMF that 'Update' needs to be enabled for an admin to be able to add new items. We have re-enabled the update privilege for LGA's, except on 'Directory Bindings'. A Cherwell ticket will need to be submitted to have directory bindings added, modified, or deleted.

In the meantime, the following it the suggested method to maintain your unit's global setting items:

• Initial setup of global settings
  Configure all global settings in the test JAMF environment
  Submit Cherwell ticket to move item to prod or copy it over
• When a change needs to be made in a global setting
  Submit Cherwell ticket to have existing setting in production deleted
  Modify setting in test