jamf_Update_Roles_Assigned_To_Self - SpecterOps

Edge Schema

Source: jamf_ApiClient, jamf_DisabledApiClient
Destination: jamf_Tenant
Traversable: ✅

General Information

The traversable jamf_Update_Roles_Assigned_To_Self edge represents an API client possessing the ‘Update API Roles’ privilege which allows updating existing API roles with any permissions, including roles assigned to itself. Since the source already has an assigned role, it can escalate its own privileges by modifying its own role definitions.