> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# jamf_Create_API_Client_and_Create_Role

> Represents a combined privilege escalation path, where the source possesses the 'Create API Integrations' and 'Create API Roles' permissions, that allow the creation of new API clients with any permissions in newly assigned roles and retrieving API client credentials to authenticate.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [jamf\_Account](/opengraph/extensions/jamf/nodes/jamf_account), [jamf\_DisabledAccount](/opengraph/extensions/jamf/nodes/jamf_disabledaccount), [jamf\_Group](/opengraph/extensions/jamf/nodes/jamf_group), [jamf\_ApiClient](/opengraph/extensions/jamf/nodes/jamf_apiclient), [jamf\_DisabledApiClient](/opengraph/extensions/jamf/nodes/jamf_disabledapiclient)
* Destination: [jamf\_Tenant](/opengraph/extensions/jamf/nodes/jamf_tenant)
* Traversable: ✅

## General Information

The traversable jamf\_Create\_API\_Client\_and\_Create\_Role edge represents a combined privilege escalation path. The source possesses both 'Create API Integrations' and 'Create API Roles' permissions, allowing creation of new API clients with any permissions in newly assigned roles and retrieving credentials to authenticate with those permissions.

```mermaid theme={null}
graph LR
    A("jamf_Account
dev.ops")
    B("jamf_Tenant
CorpJamfPro")
    C("jamf_Group
API-Managers")
    D("jamf_ApiClient
platform-client")
    A -- jamf_Create_API_Client_and_Create_Role --> B
    C -- jamf_Create_API_Client_and_Create_Role --> B
    D -- jamf_Create_API_Client_and_Create_Role --> B
```