{"id":60004,"date":"2022-03-08T10:18:18","date_gmt":"2022-03-08T15:18:18","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=60004"},"modified":"2023-03-08T15:29:07","modified_gmt":"2023-03-08T20:29:07","slug":"best-practices-for-migration-of-device-permissions-from-a-user-to-a-group","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group","title":{"rendered":"Best Practices for Migration of Device Permissions from a User to a Group"},"content":{"rendered":"\n<p>JumpCloud is the one-stop solution for centralizing access for users across devices, applications, directories, and endpoints. Customers can now manage privileged access and\/or permissions across multiple devices to ensure sensitive, administrative rights are maintained by leveraging the power of User Groups.<\/p>\n\n\n\n<p>JumpCloud enables administrators to manage permissions on devices requiring Administrator\/Sudo or Passwordless Sudo permission (the latter is only available on Mac and Linux). This allows administrators to have better control and visibility over who has access to which devices. Recently, JumpCloud released two new features that allow administrators to control these permissions at the User Group level, as well as per User Group to Device Group bind for more granular control. As a result, any user that\u2019s a member of the User Group automatically inherits permissions set at the group level.<\/p>\n\n\n\n<p>This best practices blog:<\/p>\n\n\n\n<ul>\n<li>Illustrates types of associations,<\/li>\n\n\n\n<li>Shows you how to check what binds you have as a user,<\/li>\n\n\n\n<li>Covers the two ways you can set permissions on users (globally on a user vs. individually on a device),<\/li>\n\n\n\n<li>Recommends migration to groups by first using the No Elevated Permissions on a user, and<\/li>\n\n\n\n<li>Shows you how to migrate a device to a Device Group and a user.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Types-of-Associations\">Types of Associations<\/h2>\n\n\n\n<p>There are four different ways a user can have Administrator\/Sudo permissions applied for a given device. The following illustration is a visual representation of how these permissions can be applied and\/or cascaded based on where the permission is configured.<\/p>\n\n\n\n<p>The administrator can choose any of these methods based on the organization\u2019s need to control individual devices and the roles the users will hold through the lifecycle of the identity.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"755\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-1-1024x755.png\" alt=\"\" class=\"wp-image-60013\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-1-1024x755.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-1-300x221.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-1-768x566.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-1-1536x1133.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-1-2048x1510.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"Path-1:-Global-Administrator\/Sudo-Enabled-on-User-Group\">Path 1: Global Administrator\/Sudo Enabled on User Group<\/h3>\n\n\n\n<p><em>Result:<\/em> The Administrator\/Sudo permission is being applied to all bound Device Groups and their bound devices, which grants all users within the User Group Administrator\/Sudo access to all bound devices.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Path 2: Administrator\/Sudo Enabled on Select Device Group(s) Assigned to a User Group<\/h3>\n\n\n\n<p><em>Result: <\/em>The Administrator\/Sudo permission is being applied on the User Group\u2019s bind to selected Device Groups. Devices that are bound to a Device Group with Administrator\/Sudo enabled receive Administrator\/Sudo access. As a result, bound users in the User Group will inherit Administrator\/Sudo access on those select devices<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Path 3: Global Administrator\/Sudo Enabled on an Individual User<\/h3>\n\n\n\n<p><em>Result:<\/em> This user has Administrator\/Sudo permissions for all devices they are bound to, both indirectly and directly<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Path 4: Administrator\/Sudo Enabled on User\u2019s Direct Bind to a Device<\/h3>\n\n\n\n<p><em>Result: <\/em>The Administrator\/Sudo permission is being applied to the user\u2019s direct bind to a specific device.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"[hardBreak]Checking-What-Binds-You-Have\">Checking What Binds You Have<\/h2>\n\n\n\n<p><strong>Direct Bind<\/strong><\/p>\n\n\n\n<p>Direct bind (indicated by the darker blue checkbox) indicates direct permissions that were applied on the association with selectable user inputs from the UI or the API (as illustrated below).<\/p>\n\n\n\n<p><strong>Indirect Bind<\/strong><\/p>\n\n\n\n<p>An indirect bind (indicated by the lighter blue checkbox) indicates that the device is indirectly bound to the user through a Device Group which is, in turn, bound to a User Group. (as illustrated below)<\/p>\n\n\n\n<p><strong>Why is this important?<\/strong><\/p>\n\n\n\n<p>These differences are crucial in determining if the device would be needed to get converted into a new type of association using groups.<\/p>\n\n\n\n<p>Initially, we recommend administrators check the type of bind users may already have in the JumpCloud Admin Portal.<\/p>\n\n\n\n<p><strong>Complete the following steps to check what devices are bound to the user<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to <strong>USER MANAGEMENT &gt; Users<\/strong> and select a user.<\/li>\n\n\n\n<li>Click the <strong>Device<\/strong> tab to check the status of the checkbox next to the applicable device(s).&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>If the checkbox for devices (first column on the <strong>Devices<\/strong> tab) is checked and darker in color, this indicates a direct bind exists between the device and the user. If the checkbox for a device is checked and lighter in color, this indicates an indirect bind exists between the user and the device.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"640\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-2-1024x640.png\" alt=\"\" class=\"wp-image-60015\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-2-1024x640.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-2-300x187.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-2-768x480.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-2-1536x959.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-2-2048x1279.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Setting Global Permissions on a User<\/h2>\n\n\n\n<p>You can also enable privileged access on all devices by checking <strong>Enable as Global Administrator\/Sudo on all device associations<\/strong> on a user, which elevates permissions on all devices associated with that user.<br><strong>Note<\/strong>: This setting takes the highest precedence for all the user&#8217;s devices and overrides all other settings that individual devices may have with the user.<\/p>\n\n\n\n<p><strong>Complete the following steps to enable global permission on a user<\/strong>:&nbsp;<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to <strong>USER MANAGEMENT &gt; Users<\/strong>, and select a user.<\/li>\n\n\n\n<li>Click the <strong>Details<\/strong> tab, navigate to the User Security and Settings area, and check the <strong>Permission Settings<\/strong>.<\/li>\n\n\n\n<li>Click the <strong>Enable as Global Administrator\/Sudo on all device associations<\/strong> checkbox and <strong>save user<\/strong>.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"646\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-3-1024x646.png\" alt=\"\" class=\"wp-image-60016\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-3-1024x646.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-3-300x189.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-3-768x484.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-3-1536x969.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-3.png 1608w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>This will result in the user having Administrator\/Sudo&nbsp;permissions on all devices associated with that user.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"550\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-4-1024x550.png\" alt=\"\" class=\"wp-image-60017\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-4-1024x550.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-4-300x161.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-4-768x413.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-4-1536x826.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-4.png 1600w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>This illustrates that a <em>global setting takes precedence over associations<\/em> on all devices that the user is associated with. One can use this setting if the desire is to promote all devices for a user with global Administrative\/Sudo or Passwordless Sudo with a direct or indirect bind of the devices with the user.<\/p>\n\n\n\n<p>Removing this direct association on the user will result in a state where the user still shows a combination of direct and indirect binds for devices and the states of these devices. This is due to the group-based association newly introduced within JumpCloud that allows management of devices using User Groups and Device Groups. One can proceed to undo the above change if there is a preference to control individual devices or inherit and manage permissions using groups.<\/p>\n\n\n\n<p><strong>Complete the following steps to remove Global Administrator\/Sudo permissions between users and devices<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to <strong>USER MANAGEMENT &gt; Users<\/strong>, and select a user.<\/li>\n\n\n\n<li>Click the <strong>Details<\/strong> tab, navigate to User Security and Settings Section, and check the Permission Settings.<\/li>\n\n\n\n<li>Uncheck the <strong>Enable as Administrator\/Sudo on all device associations<\/strong> checkbox, and click <strong>save user<\/strong>.<\/li>\n\n\n\n<li>Navigate to the <strong>Devices<\/strong> tab. You will see the permissions change to a combination of direct and indirect binds.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Setting-Administrative-Permissions-on-Individual-Devices\">Setting Administrative Permissions on Individual Devices<\/h2>\n\n\n\n<p><strong>Complete the following steps to manage individual devices<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to <strong>USER MANAGEMENT &gt; Users &gt; Devices<\/strong>.<\/li>\n\n\n\n<li>Select the applicable device by clicking on it.<\/li>\n\n\n\n<li>Click the <strong>dropdown arrow<\/strong> directly under the Permissions column, select the desired permission, and click <strong>save user<\/strong>. The Administrator\/Sudo permission is now set for the user on that device.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"672\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-5-1024x672.jpg\" alt=\"\" class=\"wp-image-60018\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-5-1024x672.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-5-300x197.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-5-768x504.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-5.jpg 1440w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>To manage multiple individual devices, we suggest using Device Groups, to which individual devices can be bound. Permissions can then be applied to Device Groups when the Device Group is bound to a User Group. Group-level permissions can be set on a User Group to Device Group bind, or globally at the User Group level, applying to all Device Groups.<\/p>\n\n\n\n<p>Elevated permissions that are set on an individual device bind or globally for the user should be removed for any group-level permission to take effect.<\/p>\n\n\n\n<p><strong>Complete the following steps to downgrade individual devices to having no elevated permissions<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to <strong>USER MANAGEMENT &gt; Users<\/strong>, and select a user.<\/li>\n\n\n\n<li>Click the <strong>Devices<\/strong> tab.<\/li>\n\n\n\n<li>Click the dropdown for the applicable device under the Permissions<strong> <\/strong>column.<\/li>\n\n\n\n<li>Select <strong>No Elevated Permissions<\/strong> to remove the permission for the device on the user.<\/li>\n<\/ol>\n\n\n\n<p><strong>Note<\/strong>: The <strong>No Elevated Permissions<\/strong> option&nbsp;removes the Sudo permissions, but leaves the bind.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Important Considerations<\/h3>\n\n\n\n<ul>\n<li>A direct bind association can only be removed if a device is chosen to be disassociated with a user (unchecking the direct bind). The previous state associated with the user due to elevated User Group or User Group bind permissions can still exist, which is illustrated below.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"641\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-6-1024x641.png\" alt=\"\" class=\"wp-image-60019\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-6-1024x641.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-6-300x188.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-6-768x480.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-6-1536x961.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-6-2048x1281.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>After saving the user, the user will still have an indirect bind to that device.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"641\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-7-1024x641.png\" alt=\"\" class=\"wp-image-60020\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-7-1024x641.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-7-300x188.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-7-768x480.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-7-1536x961.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-7-2048x1281.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul>\n<li>Alternatively, when a device that has no permissions is selected and chosen to be directly unbound, the device will fall off the list of the bound devices as shown below. The device can be located by unchecking the filter show bound devices, which in this case will let you locate the unbound device.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"638\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-8-1024x638.png\" alt=\"\" class=\"wp-image-60021\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-8-1024x638.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-8-300x187.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-8-768x478.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-8-1536x957.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-8-2048x1275.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><br><strong>Note<\/strong>: For API users, an easy way to identify a user\u2019s direct and indirect permissions is to <a href=\"https:\/\/docs.jumpcloud.com\/api\/2.0\/index.html#operation\/graph_userTraverseSystem\">refer to List the Systems bound to a User<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Migrating-Devices-to-Individual-Groups\">Migrating Devices to Individual Groups<\/h2>\n\n\n\n<p>Armed with all the knowledge of the above points, the administrator needs to decide if the device can be migrated to the group-based association. A quick tip to decide when to migrate a device from direct user association to a User Group &gt; Device Group association is to check if the device associated with the user is not part of any other User Group.<\/p>\n\n\n\n<p>Note the direct association of the device takes the highest precedence over the devices that get inherited using groups.<\/p>\n\n\n\n<p>You can have a user be directly bound or indirectly bound to a specific device, although it\u2019s strongly recommended to always have users be indirectly bound to a specific device via migrating individual devices to Device Groups, connecting users to User Groups, and then connecting a User Group to a Device Group to control access centrally.<\/p>\n\n\n\n<p>Here, we show you how to convert a user\u2019s access to a specific device by making that user part of a specific User Group that not only is already connected to this device via a Device Group, but also automatically applies Administrator\/Sudo permissions to that user via that User Group.<\/p>\n\n\n\n<p><strong>Complete the following steps to indirectly bind a user to a device<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>&nbsp;<\/li>\n\n\n\n<li>Go to <strong>USER MANAGEMENT &gt; Users<\/strong>, and select a user by clicking anywhere on a user\u2019s row.<\/li>\n\n\n\n<li>Click the <strong>Devices<\/strong> tab to see what devices that user is connected to and what permissions they have on each device. <strong>Note<\/strong>: In the following image, the user, Markus Ipsum, is <em><u>directly bound<\/u><\/em> (see dark blue checked box) to the device called \u201c(GCE) Win2008-2\u201d and has Administrator\/Sudo permissions.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"534\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9-1024x534.jpg\" alt=\"\" class=\"wp-image-60022\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9-1024x534.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9-300x156.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9-768x400.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg 1522w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol>\n<li>Uncheck the box located on the same row as the device and next to the Status column and click <strong>save user<\/strong>.<\/li>\n\n\n\n<li>Click the <strong>User Groups<\/strong> tab, click the checkbox of the User Group that has this device connected to it (Admin &#8211; GCE), and click <strong>save user<\/strong>. The user is now part of this specific User Group.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"507\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-10-1024x507.jpg\" alt=\"\" class=\"wp-image-60027\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-10-1024x507.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-10-300x148.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-10-768x380.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-10-1536x760.jpg 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-10.jpg 1613w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol>\n<li>The user will still have the device, \u201c(GCE) Win2008-2\u201d, assigned to them but now as an indirect bind via the User Group they are now a part of called Admin &#8211; GCE. Notice the lighter blue checked box, indicating an <em><u>indirect bind<\/u><\/em> to the device. This illustrates how the device has been migrated to utilize User Groups for centralized administration and better governance.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"711\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-11-1024x711.jpg\" alt=\"\" class=\"wp-image-60029\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-11-1024x711.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-11-300x208.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-11-768x533.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-11.jpg 1261w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"Migrating-Devices-to-Users\">Migrating Devices to Users<\/h2>\n\n\n\n<p>To migrate a device back to a user, you would need to first remove the association the user has to a User Group for the device where you would prefer direct control over it. This is typical in situations where you would prefer control over devices for the user, or provide temporary device access to certain users in the organization..<\/p>\n\n\n\n<p><strong>Complete the following steps to migrate a device to a user<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to <strong>Device Management &gt;<\/strong> <strong>Device Groups<\/strong>.<\/li>\n\n\n\n<li>Select a device group by clicking anywhere on the device group\u2019s row.<\/li>\n\n\n\n<li>Click on the <strong>Devices<\/strong> tab.<\/li>\n\n\n\n<li>Click the checkbox next to the device you want to remove.<\/li>\n\n\n\n<li>Click <strong>save<\/strong>.<\/li>\n\n\n\n<li>Ensure the device is not part of any other Device Group.<\/li>\n\n\n\n<li>Go to the <strong>User Management<\/strong> <strong>&gt;<\/strong> <strong>Users<\/strong>.<\/li>\n\n\n\n<li>Select a user by clicking anywhere on a user\u2019s row.<\/li>\n\n\n\n<li>Click the <strong>Devices<\/strong> tab and look for the specific device that should be directly bound to the user.<\/li>\n\n\n\n<li>Click the checkbox for that specific device, and select the applicable permission that the user should have to that device under the Permissions column.<\/li>\n<\/ol>\n\n\n\n<p><strong>Note<\/strong>: If the device is still part of any other groups, the direct bind of that device to the user won\u2019t be permitted.<\/p>\n\n\n\n<p>In conclusion, the direct binds are best used if the direct association on the device needs to be individually managed. Additionally, a group-based bind is best used if several devices need similar rules and properties that can be centrally managed, using the flexibility of the User Group to Device Group association. Both the users and the User Groups can also be used to leverage all devices and Device Groups collectively via a global administrator bind, which overrides the individual permissions that override all underlying permissions on the device and Device Groups respectively.<\/p>\n\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/hybrid-work-promo-person-on-laptop-aspect-ratio-160-110.jpeg\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            Enable Secure Hybrid Work Anywhere, Anytime        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            Identity, access, and device management from a single cloud-based console        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/use-cases\/remote-work\" data-promo=\"Enable Hybrid Work\" class=\"button is-primary-green promo-small-banner-link\">Learn More<\/a>\n    <\/div>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>This tutorial shows how users can manage privileged access and\/or permissions across multiple devices by leveraging the power of User Groups.<\/p>\n","protected":false},"author":166,"featured_media":60022,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[],"collection":[2778,2780],"platform":[],"funnel_stage":[3015],"coauthors":[2689],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Best Practices: Migrate Permissions from User to Group - JumpCloud<\/title>\n<meta name=\"description\" content=\"This tutorial shows how users can manage privileged access and\/or permissions across multiple devices by leveraging the power of User Groups.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Best Practices for Migration of Device Permissions from a User to a Group\" \/>\n<meta property=\"og:description\" content=\"This tutorial shows how users can manage privileged access and\/or permissions across multiple devices by leveraging the power of User Groups.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-08T15:18:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-08T20:29:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1522\" \/>\n\t<meta property=\"og:image:height\" content=\"793\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Rohit Nayak\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rohit Nayak\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group\"},\"author\":{\"name\":\"Rohit Nayak\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/4e9cce8009bfcfbbe2f95d179789af93\"},\"headline\":\"Best Practices for Migration of Device Permissions from a User to a Group\",\"datePublished\":\"2022-03-08T15:18:18+00:00\",\"dateModified\":\"2023-03-08T20:29:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group\"},\"wordCount\":2127,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg\",\"articleSection\":[\"Best Practices\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group\",\"url\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group\",\"name\":\"Best Practices: Migrate Permissions from User to Group - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg\",\"datePublished\":\"2022-03-08T15:18:18+00:00\",\"dateModified\":\"2023-03-08T20:29:07+00:00\",\"description\":\"This tutorial shows how users can manage privileged access and\/or permissions across multiple devices by leveraging the power of User Groups.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg\",\"width\":1522,\"height\":793},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Best Practices for Migration of Device Permissions from a User to a Group\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/4e9cce8009bfcfbbe2f95d179789af93\",\"name\":\"Rohit Nayak\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/afded8d905bf9a5979b66580357fd3bf\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c7ad8ee405b603e85f6904a7a756d68c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c7ad8ee405b603e85f6904a7a756d68c?s=96&d=mm&r=g\",\"caption\":\"Rohit Nayak\"},\"description\":\"Rohit Nayak is a Sr. Product Manager on Cloud Directories at JumpCloud. Rohit is responsible for the overall authorization product strategy and roadmap around group based access control for JumpCloud. Rohit brings 14 years of experience in building Identity Governance and Administration(IGA) products and Identity Management technologies with Directories, Access Management across multiple cloud platforms.\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Best Practices: Migrate Permissions from User to Group - JumpCloud","description":"This tutorial shows how users can manage privileged access and\/or permissions across multiple devices by leveraging the power of User Groups.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group","og_locale":"en_US","og_type":"article","og_title":"Best Practices for Migration of Device Permissions from a User to a Group","og_description":"This tutorial shows how users can manage privileged access and\/or permissions across multiple devices by leveraging the power of User Groups.","og_url":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group","og_site_name":"JumpCloud","article_published_time":"2022-03-08T15:18:18+00:00","article_modified_time":"2023-03-08T20:29:07+00:00","og_image":[{"width":1522,"height":793,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg","type":"image\/jpeg"}],"author":"Rohit Nayak","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rohit Nayak","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group"},"author":{"name":"Rohit Nayak","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/4e9cce8009bfcfbbe2f95d179789af93"},"headline":"Best Practices for Migration of Device Permissions from a User to a Group","datePublished":"2022-03-08T15:18:18+00:00","dateModified":"2023-03-08T20:29:07+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group"},"wordCount":2127,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg","articleSection":["Best Practices"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group","url":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group","name":"Best Practices: Migrate Permissions from User to Group - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg","datePublished":"2022-03-08T15:18:18+00:00","dateModified":"2023-03-08T20:29:07+00:00","description":"This tutorial shows how users can manage privileged access and\/or permissions across multiple devices by leveraging the power of User Groups.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/03\/best-practices-migration-device-permissions-jumpcloud-9.jpg","width":1522,"height":793},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/best-practices-for-migration-of-device-permissions-from-a-user-to-a-group#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Best Practices for Migration of Device Permissions from a User to a Group"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/4e9cce8009bfcfbbe2f95d179789af93","name":"Rohit Nayak","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/afded8d905bf9a5979b66580357fd3bf","url":"https:\/\/secure.gravatar.com\/avatar\/c7ad8ee405b603e85f6904a7a756d68c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c7ad8ee405b603e85f6904a7a756d68c?s=96&d=mm&r=g","caption":"Rohit Nayak"},"description":"Rohit Nayak is a Sr. Product Manager on Cloud Directories at JumpCloud. Rohit is responsible for the overall authorization product strategy and roadmap around group based access control for JumpCloud. Rohit brings 14 years of experience in building Identity Governance and Administration(IGA) products and Identity Management technologies with Directories, Access Management across multiple cloud platforms."}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/60004"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/166"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=60004"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/60004\/revisions"}],"predecessor-version":[{"id":77438,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/60004\/revisions\/77438"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/60022"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=60004"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=60004"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=60004"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=60004"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=60004"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=60004"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=60004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}