This page is no longer maintained. All content can be found here:
|
Introduction
Jamf Insights runs natively in a browser on any operating system. It provides your administrators access to the inventory of your enrolled Apple devices, as well as access to the most commonly used management commands, such as forcing iOS/macOS updates and wiping devices.
Jamf Insights is designed to push the boundaries of how Apple managed services are delivered and supported. By combining the expertise of the award-winning dataJAR Services team with intelligent data analytics and the power of MDM, we want to equip all datajar.mobi administrators with a modern and platform-agnostic user interface, giving them control of their Apple estate as well as the ability to respond to the support needs of their users quickly and efficiently.
Categories
Refresh computer inventory list
Perform actions on mobile devices
Requirements
The following requirements must be in place in order to use the Jamf Insights:
- An active .mobi or Jamf Service Provider Plan subscription
- Be registered as a Technical Account Administrator (TAA) or have approval from your TAA
- Have a dataJAR ID (for existing dataJAR customers), or a Jamf ID (for new customers).
- One of the following supported browsers:
macOS
|
Browser |
Version |
|
Safari |
15.3 or newer |
|
Chrome |
104.x or newer |
|
Edge |
104.x or newer |
Windows
|
Browser |
Version |
|
Chrome |
104.x or newer |
|
Edge |
104.x or newer |
iPadOS
|
Browser |
Version |
|
Chrome |
104.x or newer |
|
Edge |
104.x or newer |
|
Safari |
15.3 or newer |
Using Jamf Insights
To access Jamf Insights, simply click the following link in your preferred browser: https://eu.insights.jamf.com
Existing dataJAR customers will be able to sign in with their dataJAR ID (powered by Okta). New customers will log in with the Jamf ID. Once in, you will be presented with the Insights page for your instance(s).
Insights
Insights allows you to monitor your Apple estate, giving you a focused look at specific areas. If you have more than one site, you can even select multiple sites to view the entire estate.
These areas include:
- Installed and pending application (app) installations for macOS
- Number of devices being managed, macOS and iOS
- Storage utilisation of your devices
- Device encryption compliance
- Operating System versions being used
- Fleet visibility
- dataJAR Defend threat protection status
All areas on this page can be interacted with to provide further detailed information. Upon selecting an element (depending on the metric), you can take further actions or export data.
Computer inventory list
You can access your computer inventory by either selecting Computers from the left menu or selecting a computer from one of the items on the Insights page. Here you can see the complete list of computers enrolled in your instance. This section will only show you one instance at a time (if you have multiple instances).
This opens with a list of ‘All Computers”, and you can use the selector at the top to either search through all computers or to change to specific groups. You can search for any terms mentioned within the computer details.
If required, we can also add more custom groups for you. Please contact the services team to request this.
Computer detail view
If you select a computer from any window, you will be presented with a more detailed view of that computer on the right-hand side.
Here you will see more details for that specific computer, including:
- Name of computer
- Last inventory update
- Model
- Serial number
- OS Version
- Device memory
- Storage used
- When the computer last checked in
- IP address
- Current assigned role
- ADE/DEP status
- Active Directory status
Refresh computer inventory list
There are two areas where you can refresh the information shown on the Portal. This is done using the refresh button (a small circular arrow).
You can refresh your entire instance using the button next to your instance name.
Please note: This will call back for your entire inventory. If you have a large estate this may take some time. This will also refresh your mobile devices if present.
You can also refresh an individual device, which is great for checking on a single item and recommended if you want a speedy response for a change made to a specific device.
Perform actions on computers
To perform an action on a computer, select the desired computer(s) from the results and the details will populate on the right side. Here you can find the MDM commands available to select.
Multiple computers can be selected by holding down the ⌃ (shift) or ⌘ (command) keys while selecting. Giving you "Group management actions", you can use this to manage multiple devices in the same way you manage individual devices.
Depending on the macOS version of the device(s), available actions may include:
MDM Management:
- Blank Push - Send a blank push to test Apple Push Notifications.
- Update Inventory - Request the device to collect and send a report of its configuration back to your instance.
- Wipe Computer - This will trigger a wipe command with a 6-digit passcode to prevent unwanted use or re-enrollment. This code can be found in the MDM history.
- Flush Failed Commands - Flush out any failed management commands.
- Enable/Disable Bluetooth - Enables or disables Bluetooth on select computers.
- OS Update - Download - Send a command to force a device to download and cache the latest minor operating system version and security updates available.
- OS Update - Download & Install - Send a command to force a device to update the operating system to the latest minor operating system version and security updates available.
Management Actions:
- Restrictions Toggle - This removes the restrictions from the selected device, depending on the setup of your instance.
- Administrator rights Toggle - This changes the role of the device to allow administrator privileges, depending on the setup of your instance.
- Management Toggle - This can remove the management on the device, meaning you can no longer manage applications on the device. However, it will not remove it from the instance. It can be re-enabled at any time.
- Change Role - This will allow you to change the role the computer has been assigned to. You will be presented with a list of all the roles available; the new role can simply be selected and the computers will be immediately re-assigned after saving.
- Asset tag - A user-editable field that can have any details added to it to assist in device identification. This field it also searchable using the search feature.
- Notes - A user-editable field that can have any details added to it.
Support Actions:
- Log a support ticket for this device - Clicking this will take you to our support pages where you can raise a ticket for the device.
-
Export Summary - Produces a .CSV file of the selected computers containing the below items. This will be saved to your desktop:
- Computer name
- Serial number
- MAC address
- Model
- The user assigned
- Last inventory date
- Retrieve filevault key - Clicking this will give you an exportable list of FileVault keys for the selected devices. Click for more information.
- Request device removal - Clicking this remove the device(s) from the instance, and clear any data stored relating to the device(s). There is a warning message to ensure this is not accidentally selected.
MDM History Tab:
MDM History will show an audit trail of management actions on the selected device, together with a timestamp and the username of the agent issuing the command.
Applications Tab:
This tab shows all reported Applications installed on the Mac from the last inventory update. You can use the MDM command "Update Inventory" to get an up-to-date list.
Retrieve FileVault Keys
Selecting single or multiple devices will give you the management option to retrieve FileVault keys for the selected devices.
You will be asked to confirm you agree to take responsibility for the device's data and encryption access.
Once confirmed, you will be presented with the key for the selected device(s) with the ability to export this using a single button.
All FileVault key retrievals are logged in the MDM history section of each device. We also keep a log of this with the service desk for added security.
Mobile inventory list
The next option is your mobile inventory. Here you can see the complete list of mobile devices enrolled on your instance.
Like the computer inventory list, you can search via the search bar, as well as use the refresh buttons to refresh either the device or the whole instance.
Mobile detail view
If you select any mobile device under the Inventory window, you will be presented with a more detailed view of that device on the right-hand side.
You can view more details for that specific device including:
- Name of the device
- Model
- Serial number
- OS Version
- Storage used
- Battery level
- Last enrolment date
- Current assigned user
- And much more
Refresh mobile inventory list
There are two areas where you can refresh the information shown on the Portal. This is done using the refresh button (a small circular arrow).
You can refresh your entire instance using the button next to your instance name.
Please note: This will call back for your entire inventory. If you have a large estate this may take some time. This will also refresh your computers if present.
You can also refresh an individual device, which is great for checking on a single item and recommended if you want a speedy response for a change made to a specific device.
Perform actions on mobile devices
As with computers, select the desired mobile device(s) in the Inventory window, and then click the cog icon to perform actions. You can select multiple devices by holding down the ⌘ (command) keys while selecting the devices.
Depending on the iOS version of the device(s), available actions may include:
MDM Management:
- Update name - Update the device name by clicking the name at the top of the list.
- Send blank Push - Send a blank push to test Apple Push Notifications.
- Update Inventory - Here you can force the devices to refresh their inventory. After the inventory update, anything not installed or missing will auto-install on those devices.
- Clear Passcode - Removes any set passcode on the device.
- Flush Failed Commands - Flush out any failed management commands.
- Enable/Disable Bluetooth - Enables/disables Bluetooth on the device.
- Clear Screen Time Passcode - Removes any set Screen Time Passcode on the device.
- Enable/Disable personal hotspot - Enables/disables personal hotspot switch on the device.
- Enable/Disable Lost Mode* - You can put a batch of devices into Lost Mode. The page will ask you for the message you wish to display on the lock screen. To revoke Lost Mode, or to find the device’s location, tap on a single device to go to its detailed screen. There you will have options to disable Lost Mode as well as update any location information.
- Lock Devices - Locks the device, requiring the passcode (if set) to be used to unlock it.
- Restart device - You can restart one or more devices.
- OS Update - Download - You can download a new OS update on one or more devices.
- OS Update - Download & Install - You can download and install a new OS update on one or more devices. (Note, this only works for managed devices on iOS 15 or above)
- Wipe Device - This will trigger a wipe command following a successful challenge prompt to avoid unintended wiping.
Management Actions:
- Restrictions Toggle - This removes the restrictions from the selected device, depending on the setup of your instance.
- Management Toggle - This can remove the management on the device, meaning you can no longer manage applications on the device. However, it will not remove it from the instance. It can be re-enabled at any time.
- Change Role - This will allow you to change the role the computer has been assigned to. You will be presented with a list of all the roles available, you can then simply select the new role and the computers will be immediately re-assigned after saving.
- Asset tag - A user-editable field that can have any details added to it to assist in device identification. This field is also searchable using the search feature.
- Notes - A user-editable field that can have any details added to it.
Support Actions:
- Log a support ticket for this device - Clicking this will take you to our support pages where you can raise a ticket for the device.
-
Export Summary - Produces a .CSV file of the selected computers containing the below items. This will be saved to your desktop:
- Computer name
- Serial number
- MAC address
- Model
- The user assigned
- Last inventory date
- Delete Device - Clicking this remove the device(s) from the instance, and clear any data stored relating to the device(s). There is a warning message to ensure this is not accidentally selected.
*Please Note: If you enable lost mode on a device and it loses network access or restarts, you may not be able to disable lost mode, if this occurs the device will need to be wiped and re-enrolled.
Volume Purchasing
The Volume Purchasing pane will display the apps that have been purchased via VPP in Apple School/Business Manager. It will show the number of licenses that have been purchased, are currently in use, and remain. You can also see at a glance the groups the app has been scoped to, including exclusions and limitations.
You can also export this information as a .CSV file.
Automated enrolment
Automated enrolment allows you to configure the automated enrolment process for iOS and macOS devices. After assigning a new device to dataJAR in Apple School/Business Manager, the device needs to be assigned to an enrolment group in order for it to enrol automatically.
To the right of the search box, you can select between macOS (Computers) and iOS (Mobile Devices), depending on your environment. This will show your enrolment groups which usually comprise of 1-to-1 devices and Shared devices in each section. You can assign a device by selecting the checkbox for a device under the appropriate enrolment group. You can also move a device between groups by unchecking the device under one group, and then rechecking the check box under the other group.
Get Support
Here you will find our knowledge base articles and latest updates.
Resource Centre
The Resource Center**, the purple icon found in the bottom right-hand corner on any page, is where you will be able to access:
- Announcements
- Raise a support ticket
- System Status
- User Guides
- Feature Requests/Feedback
**Some actions/options are dependant on subscription type
Further reading
Need further support?
If you still require assistance with us or have any further questions, please raise a ticket with our support team.
Alternatively, please see our frequently updated knowledge base articles for reference.