What happens when we choose option "Allow SSH access for management account only"

[khurram]

What happens when we choose option "Allow SSH access for management account only" under Settings: Global Management: User-Initiated Enrollment. I am asking this question because we want to understand the security mechanism.

[boberito]

Jamf has an admin account. It allows SSH access for that management account. This is used pretty much only for Jamf Remote app. 

[scottb]

See this page in the Jamf Admin Guide...

Enrollment/SSH 

[jshier]

@scottb Unfortunately the admin guide doesn't really answer the question. As that's setting is phrased, it seems like it could mean a few things.

1. The management account can only be accessed through SSH and GUI login is disabled.

2. Only the management account can be accessed through SSH, no other accounts can be.

3. Some combination of 1 and 2.

4. Something else. 

So, does anyone know the full answer here?