Skip to main content
Question

Changing Compliance Criteria

  • July 20, 2026
  • 1 reply
  • 87 views
PetrovI

We have Jamf-enrolled macOS devices integrated with Microsoft Entra and Microsoft Intune for office and conditional access. Currently, a single compliance group in Jamf sends the device compliance status to Entra, where it's used for Conditional Access policies.

Our client now wants to expand the compliance requirements by adding several new criteria. I'm wondering what the best approach is:

Should we add the new compliance criteria to the existing compliance group

Or would it be better to create a new compliance group, validate it, and then switch Entra reporting to the new group once it's ready

I'd appreciate any recommendations or tips.
Thx

    1 reply

    E
    Forum|alt.badge.img+2
    • eran.stark
    • New Contributor
    • July 20, 2026

    From my understanding, Jamf only uses one Compliance Smart Group for reporting compliance to Microsoft Entra, so the only option is to update the criteria of that group.

    What I would recommend is first cloning the existing Compliance Smart Group and testing your new criteria there, or testing them in a sandbox environment. Once you're happy with the results, apply the same changes to the production Compliance Smart Group that's assigned under Settings → Global → Device Compliance. This way you can validate everything without impacting production devices.

    Terms & ConditionsAccessibility statement