> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# jamf_Create_API_Client_and_Assign_Role

> Represents a privilege escalation path where the source possesses 'Create API Integrations' permission and at least one role exists allowing the creation of new API clients to assume existing role permissions.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [jamf\_Account](/opengraph/extensions/jamf/nodes/jamf_account), [jamf\_DisabledAccount](/opengraph/extensions/jamf/nodes/jamf_disabledaccount), [jamf\_Group](/opengraph/extensions/jamf/nodes/jamf_group), [jamf\_ApiClient](/opengraph/extensions/jamf/nodes/jamf_apiclient), [jamf\_DisabledApiClient](/opengraph/extensions/jamf/nodes/jamf_disabledapiclient)
* Destination: [jamf\_Tenant](/opengraph/extensions/jamf/nodes/jamf_tenant)
* Traversable: ✅

## General Information

The traversable jamf\_Create\_API\_Client\_and\_Assign\_Role edge represents a privilege escalation path. The source possesses 'Create API Integrations' permission and at least one role exists, allowing creation of new API clients that assume existing role permissions and retrieving credentials for authentication.

```mermaid theme={null}
graph LR
    A("jamf_Account
platform.eng")
    B("jamf_Tenant
CorpJamfPro")
    C("jamf_Group
DevOps-Team")
    D("jamf_ApiClient
service-mesh")
    A -- jamf_Create_API_Client_and_Assign_Role --> B
    C -- jamf_Create_API_Client_and_Assign_Role --> B
    D -- jamf_Create_API_Client_and_Assign_Role --> B
```