During integration of Jamf Pro with Entra, a Global Administrator account is needed and this account must exist on the Entra tenant. Often, we use the same account to set up the app registrations for Jamf Connect and to create the various changes for conditional access exemptions, etc.
Once these are set up, can this Global Administrator account be safely removed from Entra without affecting any of the integrations or applications created?
The global administrator account used for setup must remain active. In most cases, with SSO using Entra, deactivating this account will cause unauthorized access issues during sync. A generic admin account can be used instead of a named account.
Thank you. Is this documented somewhere?
Confirmed with Jamf Support that once the integrations have been set up, the account is no longer needed.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.