Assign Pro guide
Troubleshooting Assign Pro
Use this page when Assign Pro cannot connect, cannot preview, or cannot run the final assignment.
No Saved Services
If the picker shows no saved services:
- Enter the Jamf Pro URL and credentials manually.
- Confirm Save in Keychain is enabled if your policy allows it.
- Connect successfully once so Assign Pro can store the saved service.
- If testing development builds, use signed local runs when Keychain continuity matters.
Connection Fails
Check:
- Jamf Pro URL is correct.
- API client is enabled.
- Client secret is current.
- API role has the Assign Pro permissions.
- The Mac can reach the Jamf tenant.
Static Groups Do Not Load
The API role must include Read Static Computer Groups.
Also confirm the connected Jamf tenant has static groups available to the API client. Assign Pro works with static computer groups, not smart groups.
Preview Finds No Matches
Check:
- The CSV has a header row.
- The identifiers are in the first column.
- The values exist in Jamf computer inventory.
- The API role includes
Read Computers. - The CSV was not exported with changed serials, trimmed leading zeroes, or accidental formatting changes.
Run Assignment Is Locked
Run Assignment stays locked until:
- A CSV is loaded.
- A target static group is selected.
- Preview has completed.
- At least one Jamf computer has matched.
This is expected behaviour. Preview again after changing the CSV or target group.
Assignment Fails
The API role must include Update Static Computer Groups.
If the failure continues, export the activity console and check whether the static group changed in Jamf during the workflow, the client secret was rotated, or network access changed while the update was running.