This article covers every Jamf Pro workflow action for managing users, user groups, and mobile devices — retrieving user profiles, adding or removing group membership, and sending remote MDM commands such as lock, erase, OS update, and blank push to mobile devices. For computer-specific actions, see how to manage Jamf Pro computers from HappyFox Workflows.
Validation note legend
| Term | Meaning |
|---|---|
| Required | The workflow will fail to run if this field is blank or missing. |
| Optional | The field can be left blank; the action will still run. |
| Text | A plain text value. Can include dynamic workflow variables. |
Note on ID fields: For fields that accept a user ID or user group ID, you may supply either the numeric Jamf Pro ID or the record's name (and, for users, their email address or full name). The action automatically resolves names and emails to the correct numeric ID before calling the API.
User Actions
Get User Details
Fetches the full profile record for a Jamf Pro user by their ID, name, or email. The returned user object is available for use in later workflow steps.
| Field | Description | Validation |
|---|---|---|
| User ID | The Jamf Pro user ID, username, full name, or email address of the user to look up. | Required · Text |
Add User to User Group
Adds a Jamf Pro user to a specified user group. If the user is already a member of the group, the request has no effect.
| Field | Description | Validation |
|---|---|---|
| User ID | The Jamf Pro user ID, username, full name, or email address of the user to add. | Required · Text |
| User Group ID | The Jamf Pro user group ID or group name to add the user to. | Required · Text |
Remove User from User Group
Removes a Jamf Pro user from a specified user group. If the user is not currently a member, the request has no effect.
| Field | Description | Validation |
|---|---|---|
| User ID | The Jamf Pro user ID, username, full name, or email address of the user to remove. | Required · Text |
| User Group ID | The Jamf Pro user group ID or group name to remove the user from. | Required · Text |
Mobile Device Actions
Lock Mobile Device
Sends an MDM DeviceLock command to a managed mobile device (iPhone, iPad, or iPod touch), immediately locking its screen. The user will need their device passcode to unlock it.
| Field | Description | Validation |
|---|---|---|
| Mobile Device ID | The numeric Jamf Pro mobile device ID of the device to lock. | Required · Text |
Erase Mobile Device
Sends an MDM EraseDevice command to a managed mobile device, performing a complete remote wipe and returning the device to factory settings.
| Field | Description | Validation |
|---|---|---|
| Mobile Device ID | The numeric Jamf Pro mobile device ID of the device to erase. | Required · Text |
Warning: This action is irreversible. Once the workflow sends this command, the device is wiped back to factory settings and its data cannot be recovered.
Schedule OS Update for Mobile Device
Schedules an OS update to be installed on a managed mobile device via an MDM ScheduleOSUpdate command. The update applies the next time the device checks in and the update conditions are met.
| Field | Description | Validation |
|---|---|---|
| Mobile Device ID | The numeric Jamf Pro mobile device ID of the device to update. | Required · Text |
Send Blank Push to Mobile Device
Sends a silent BlankPush MDM notification to a managed mobile device, prompting it to check in with the Jamf Pro MDM server and forcing any pending commands to run.
| Field | Description | Validation |
|---|---|---|
| Mobile Device ID | The numeric Jamf Pro mobile device ID of the device to push. | Required · Text |
Your workflow can now manage Jamf Pro users, user groups, and mobile devices. Next, see how to manage Jamf Pro computers from HappyFox Workflows to extend the same automation to computers and computer groups.