Skip to main content
Applies to BloodHound Enterprise and CE The following Cypher rules define the default Privilege Zone for the JamfHound extension. Each rule is defined in a JSON file located in the PrivilegeZoneRules directory of the JamfHound repository.

​
Tenant

Tenant nodes in JAMF Pro. 
MATCH (n:jamf_Tenant)
RETURN n
This rule is defined in the tenant.json file.

​
Tier Zero Principals

Accounts and group principals with ‘Full Access’ administrator privileges in the tenant and ‘SSO’ configuration if enabled. 
MATCH (n)
WHERE n.Tier = 0
RETURN n
This rule is defined in the tier0-principals.json file.

​
Tier One Principals

Other devices and principals without granted tenant administrator permissions. 
MATCH (n)
WHERE n.Tier = 1
RETURN n
This rule is defined in the tier1-principals.json file.