> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# jamf_Create_API_Client_and_Update_Role

> Represents a combined privilege escalation path where the source possesses 'Create API Integrations' and 'Update API Roles' permissions and at least one API role exists allowing the creation of new API clients to assume roles, modifying the permissions of existing roles, and retrieving API client credentials.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [jamf\_Account](/opengraph/extensions/jamf/nodes/jamf_account), [jamf\_DisabledAccount](/opengraph/extensions/jamf/nodes/jamf_disabledaccount), [jamf\_Group](/opengraph/extensions/jamf/nodes/jamf_group), [jamf\_ApiClient](/opengraph/extensions/jamf/nodes/jamf_apiclient), [jamf\_DisabledApiClient](/opengraph/extensions/jamf/nodes/jamf_disabledapiclient)
* Destination: [jamf\_Tenant](/opengraph/extensions/jamf/nodes/jamf_tenant)
* Traversable: ✅

## General Information

The traversable jamf\_Create\_API\_Client\_and\_Update\_Role edge represents a combined privilege escalation path. The source possesses 'Create API Integrations' and 'Update API Roles' permissions and at least one API role exists, allowing creation of new API clients, modifying existing role permissions, and retrieving credentials for authentication.

```mermaid theme={null}
graph LR
    A("jamf_Account
Dev Ops Admin")
    B("jamf_Tenant
CorpJamfPro")
    C("jamf_Group
Integration Team")
    D("jamf_ApiClient
Integration Runner")
    A -- jamf_Create_API_Client_and_Update_Role --> B
    C -- jamf_Create_API_Client_and_Update_Role --> B
    D -- jamf_Create_API_Client_and_Update_Role --> B
```