As part of Jamf Pro 11.2.0 and later, Jamf has made a permissions change which affects enrollment. It is is mentioned in the 11.2.0 release notes in the Other Changes and Improvements section:
The Jamf Pro Server Action privilege, “Enroll Computers and Mobile Devices”, was split into two separate privileges.
What this means is that in Jamf Pro versions before 11.2.0, you had one permission:
- Enroll Computers and Mobile Devices
As of Jamf Pro 11.2.0, there are now two permissions:
- Enroll Computers
- Enroll Mobile Devices
The important thing to know is that as part of upgrading to Jamf Pro 11.2.0, the Enroll Computers and Mobile Devices permission is removed, but the following permissions are not selected automatically:
- Enroll Computers
- Enroll Mobile Devices
To address this issue, if needed go into the Jamf Pro admin console following the upgrade to Jamf Pro 11.2.0 and select the new separate Enroll Computers and Enroll Mobile Devices permissions.
