Create a Device Level macOS JumpCloud App Controls Policy

You can use the JumpCloud App Controls to hide the JumpCloud Menu Bar App from macOS devices in your organization. The JumpCloud Menu Bar App lets users log in to their device using their JumpCloud credentials and access the User Portal without having to re-enter a password. The user’s JumpCloud password also provides access to the device, software, WiFi, and everything else an IT infrastructure has to offer. The user can also use the JumpCloud Menu Bar App to change the JumpCloud password without Admin intervention.

The JumpCloud agent silently installs the JumpCloud Menu Bar App automatically. You don't have to remember to manually install the JumpCloud Menu Bar App. If you don't want to provide the user with access to the JumpCloud Menu Bar App, you must manually hide it. Although you can hide the JumpCloud Menu Bar App on a user’s device, we recommend that you leave it enabled. See Getting Started: the JumpCloud Menu Bar App.

In some cases, the JumpCloud Menu Bar App can’t be used on a device and should be hidden. One of these cases is when user accounts are managed by Active Directory through AD Integration. These user accounts can’t use the JumpCloud Menu Bar App to reset their passwords.

After you create this policy, you can apply it to devices and groups of devices and monitor the status of each device.

Prerequisites

• Apple Mobile Device Management (MDM) must be configured for your organization and Mac computers must be enrolled in JumpCloud MDM. See Set up Apple MDM. 
• This policy is supported on Mac computers running macOS 13 and later.
• Target Mac computers must have an active network connection for this policy to take effect.

Considerations

• To apply a policy to a device, the device must be running on a supported OS. Before you assign a policy, follow the instructions in Getting Started: Devices.
• To apply a policy to a group of devices, you must define device groups. Before you assign a policy, follow the instructions in Getting Started: Groups.
• A restart of the device is required for the policy to take effect.

To create a JumpCloud App Controls policy for Mac:

Creating the Policy

To create a JumpCloud App Controls policy for Mac computers, do the following:

Selecting the Policy Template

1. Log in to the JumpCloud Admin portal.

2. Go to Device Management > Policy Management. The Policy Management page is displayed.
3. On the Policy Management page, click +Add New.
4. Select Device Policy to assign the policy to devices and device groups. On the New Device Policy page:
   • Select the macOS tab.
   • Search and select the required policy and click Configure. The Details tab of the policy is displayed.
   • On the Details tab, configure the required policy configuration settings.
   • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
   • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

1. Under Settings, select Hide JumpCloud Menu Bar App.

Applying the Policy

• (Optional) Select the Policy Groups tab. Select one or more policy groups where you want to add this policy. 
• Select the Device Groups tab. Select one or more device groups where you want to apply this policy. For device groups with multiple OS member types, the policy only applies when a user logs into a supported Mac computer that is enrolled in Apple MDM.
• Or, select the Devices tab. Select one or more devices whom you want to add this policy to.
• Click Create Policy. A success message is displayed indicating the completion of policy creation.

Viewing Policy Status

1. Select the Status tab.
2. To see the last Result Log for a device where this policy is applied, click view.