> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# jamf_CreateAPIRoles

> Represents the ability to create API roles in the Jamf tenant. Non-traversable because creating roles without the ability to create or update API integrations does not provide a credential retrieval mechanism.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [jamf\_Account](/opengraph/extensions/jamf/nodes/jamf_account), [jamf\_DisabledAccount](/opengraph/extensions/jamf/nodes/jamf_disabledaccount), [jamf\_Group](/opengraph/extensions/jamf/nodes/jamf_group), [jamf\_ApiClient](/opengraph/extensions/jamf/nodes/jamf_apiclient), [jamf\_DisabledApiClient](/opengraph/extensions/jamf/nodes/jamf_disabledapiclient)
* Destination: [jamf\_Tenant](/opengraph/extensions/jamf/nodes/jamf_tenant)
* Traversable: ❌

## General Information

The non-traversable jamf\_CreateAPIRoles edge represents the ability to create API roles in the Jamf tenant. This edge is non-traversable on its own because creating roles without the ability to create or update API integrations does not enable privilege escalation.

```mermaid theme={null}
graph LR
    A("jamf_Account
API Architect")
    B("jamf_Tenant
CorpJamfPro")
    C("jamf_Group
API Admins")
    D("jamf_ApiClient
Integration Tool")
    A -- jamf_CreateAPIRoles --> B
    C -- jamf_CreateAPIRoles --> B
    D -- jamf_CreateAPIRoles --> B
```
