> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# jamf_CreatePolicies

> Represents possession of the 'Create Policies' JSSObject privilege allowing code execution on target computers.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [jamf\_Account](/opengraph/extensions/jamf/nodes/jamf_account), [jamf\_DisabledAccount](/opengraph/extensions/jamf/nodes/jamf_disabledaccount), [jamf\_Group](/opengraph/extensions/jamf/nodes/jamf_group), [jamf\_ApiClient](/opengraph/extensions/jamf/nodes/jamf_apiclient), [jamf\_DisabledApiClient](/opengraph/extensions/jamf/nodes/jamf_disabledapiclient)
* Destination: [jamf\_Computer](/opengraph/extensions/jamf/nodes/jamf_computer)
* Traversable: ✅

## General Information

The traversable jamf\_CreatePolicies edge represents possession of the 'Create Policies' privilege allowing code execution on target computers. This is a critical attack path as policies can execute commands, run scripts, and deploy packages to managed computers.

```mermaid theme={null}
graph LR
    A("jamf_Account
it.engineer")
    B("jamf_Computer
MacBook-Pro-01")
    C("jamf_Computer
iMac-Design-03")
    D("jamf_Group
PolicyAdmins")
    A -- jamf_CreatePolicies --> B
    A -- jamf_CreatePolicies --> C
    D -- jamf_CreatePolicies --> B
    D -- jamf_CreatePolicies --> C
```