Connecting Vanta & Jamf Pro

• Open Integrations from the left-hand navigation panel
• Search for Jamf Pro in the Available tab 
• Select Connect
• Log into your Jamf Pro administrator account.
• Select the settings icon, and choose User accounts and groups

• Create a new user that meets Vanta’s requirements 
  • We recommend vanta_service_user to help you remember its relation to Vanta
  • Full access and Custom  permission set
    • Note: We also support Site Access and Group Access if you’d like Vanta to have access only to particular Jamf objects belonging to a site. However, Users with Site Access cannot fetch Jamf accounts for Vanta access-related workflows. Proceed with this option if you do not wish to monitor Jamf account access in Vanta.
    • Please keep in mind that only workspace domains can use site scoping. An alternative for non-workspace domains would be using the VantaNoAlert group, a special group for removing computers from scoping.

• Hold on to the username/password– you’ll need to add them to Vanta
• Navigate to Privileges  and grant the following read-only privileges
  • User accounts and groups
  • Computers

  • macOS Configuration Profiles

• Fill in the rest of the details with the appropriate full name, email, and password. Remember to save the password.
• Return to Vanta
• Enter the credentials for this account and your *.jamfcloud.com domain into the Vanta connections flow.
• Select Validate credentials
• You will receive either a confirmation that the credentials are configured correctly or an error message explaining how they’re misconfigured. 

Controlling Scope through Jamf Pro

Vanta’s Jamf integration enables you to control which computers and accounts should be automatically marked in and out of scope in Vanta by creating and managing Vanta groups within Jamf.

• Log in to Jamf Pro and click Settings in the left sidebar
• Navigate to Network followed by Sites.
• Click the New button at the top right corner to create a site for scoping accounts and computers in and out of Vanta. The name needs to start with Vanta followed by any text, e.g., Vanta Employees.
• Assign the group in Vanta to the desired accounts and computers. For more detailed instructions, visit the Jamf Pro product documentation.

For Workspace customers, please visit Control Scope with Jamf for Workspace.