How To Allow Site Admins Access to Create SCEP Config Profiles

[RCRC74]

At the moment, site admins are not able to create or edit any configuration profiles with the SCEP payload, when an existing one is selected or created by a Site Admin, the page just loads the spinning loading wheel and finally errors out after some minutes. Is there a permissions setting that needs to be selected for this to work for Site Admins? Full admins work without issue, thanks.

[howie_isaacks]

In Settings - System - User accounts and groups, when you go into a specific user or group, you can go to Privileges - Jamf Pro Server Objects and give the appropriate permissions. I encourage you to test the new privileges before giving them to everyone.

[RCRC74]

The response to the case from Jamf is the following:

We believe that we are running into a known issue. PI103709: Cannot create or access configuration profile with SCEP payload while inside a Jamf Pro site

I will be waiting for a solution, for now Site Admins will not be able to configure SCEP payload configuration profiles within a Site realm, they can only be configured by a full admin within the Full Jamf Pro realm selection from the drop down.

[howie_isaacks]

That's annoying. My heart sinks every time I hear "PI" or "product issue" from Jamf.