Jamf AI Agent for Mac & iPhone in Teams & Slack

IT Teams of all sizes trusts Workativ AI to automate IT Operations & Support

Jamf AI agent why Apple device support piles up

Apple device questions are routine, yet each one waits
for someone who knows where things live in Jamf.

Mac questions land
on a small team

Where is Self Service, why does my Mac want an update, who can unlock it: a few people field all of it.

Lost devices need the
right command fast

Lost Mode, a remote lock and an erase each fit a different device, and the choice falls to whoever is on call.

Jamf's AI Assistant
faces IT, not staff

Jamf describes it for IT and Security teams, not for staff asking about their own device.

Jamf AI assistant Mac and iPhone help in Teams and Slack

Staff ask about the Mac or iPhone in their hands,
and the reply is based on its Jamf record.

Each answer names the policy, version or app involved. Locks, erases and key requests go to a named approver first.

A request for Acrobat ends with the license approved and the install running from Self Service.

The reply says whether the app is already in Self Service or needs approval first

The last-updated date is shown, so the reader can judge how old the steps are

Learn more →

Jamf AI agent workflow automation

Update deadlines, refresh cycles, failed policies and blocked apps
each start from a date or an event, so they can run themselves.

Owners are asked in Teams or Slack, and anything that erases a Mac waits for confirmation.

Macs below the required macOS version get reminders before the deadline, then IT hears about the rest.

The nudge states the version, the deadline and where to start the update

The manager is told only about Macs still behind on the last day

Learn more →

Jamf AI agent a live deployment for reference

At NMDC, 78% of IT tickets close without an
engineer, with support running in Teams.

78%

Share of IT tickets closed with no engineer

Password resets, access requests, and incident triage resolved in chat without a technician, across 6,000 tickets a month.

$37K+

Monthly L1 cost NMDC
no longer carries

About 390 engineer-hours of L0 and L1 requests a month now run without an engineer.

"Workativ has been with us every step of the way. From our first IT support use case to HR, and soon Procurement. The platform grows with us, and so does the team behind it. It's rare to find a solution that's both powerful and genuinely easy to manage."

Imran Abid

IT Operations Leader · NMDC Group

How to deploy

Deploy a Jamf AI agent in three steps.

Platform

Jamf Pro stays the system that manages your
Apple fleet. Workativ gives employees a way to talk to it.

You pick the commands, the groups and the approvers, and every run is on record.

No-Code Builder for Your Jamf AI Agent

Choose which Mac and mobile questions the agent takes

Decide which Jamf commands it may send, and for whom

Name the approver for locks and erases

Jamf AI assistant · Jamf Self Service · Jamf Slack integration · Jamf Teams integration

Jamf's AI Assistant and a Jamf AI assistant in chat, side by side.

Jamf made its assistant for the admins who run the fleet. Workativ is built around the employee holding the device, and around what should happen after they ask.

What matters to IT
Who it is for	Staff and IT technicians, in Teams or Slack	IT and Security teams, in the Jamf portal
What it answers	One device: apps, version, enrollment, group membership	Fleet questions, what a policy or Smart Group does, compliance checks, app risk
Acting on a device	Install policy, check-in, lock, Lost Mode, erase after approval	Read-only or read-and-write skills, chosen by the admin
How access is decided	API role and client with the privileges you grant	Admin SSO limits who can use it
Beyond Jamf	Entra ID, Okta, your ITSM and HR systems	The Jamf environment: Jamf Pro and Jamf Protect
Employee self-service	Yes, this is the main use	Not what Jamf describes it for

HR inbox problem same questions, 40 times a week

Where every asker already holds an Atlassian account and nothing leaves Jira and Confluence, Rovo may be enough, and its per-person access is a real advantage. Workativ makes sense when askers have no Atlassian account, or when an answer has to end with a request in another system. Plenty of teams would run the two together.

Jamf helpdesk · Jamf Pro · Jamf Slack integration · Jamf Teams integration

Jamf knows the device. Your identity,
ticketing and HR tools know everything around it.

One request can touch Entra ID or Okta for the account, your ITSM for the ticket, and HR for who is joining or leaving.

Security & Compliance

Enterprise-grade security for IT environments
where data protection is non-negotiable.

Workativ HR AI assistant security certifications SOC 2 Type II, ISO 27001, GDPR, HIPAA compliant

Immutable audit trail

Role-based access controls

Secrets & token masking

Prompt injection protection

SSO & MFA

SIEM integration

Bring a Jamf AI agent to
Teams and Slack.

Mac and iPhone answers from Jamf Pro, with the command sent after approval. Live in 3–5 days.

Frequently
asked questions

Frequently asked questions about
the Jamf AI agent

What is a Jamf AI agent?

A Jamf AI agent takes questions about a Mac, iPhone or iPad from the person who owns it, checks the device in Jamf Pro, and can run a command on it. Workativ's Jamf AI agent works in Microsoft Teams or Slack, acting as a Jamf helpdesk for employees. It asks the right person to approve anything that erases or locks a device, and logs every command.

Is a Jamf AI assistant the same as Jamf's AI Assistant?

No. Jamf's AI Assistant is a feature inside the Jamf portal for IT and Security teams, and it is off until an admin opts in. A Jamf AI assistant from Workativ sits in Teams or Slack and is meant for the employee holding the device. IT can keep both: Jamf's for fleet questions, Workativ's for everyone asking in chat.

What can employees ask it?

How to get an app from Self Service, why their Mac keeps asking for an update, whether a new MacBook has finished setting up, and what to do about a lost iPhone. The agent looks up that device in Jamf Pro and replies in everyday language.

What can it do to a Mac, iPhone or iPad?

Run a policy so an app installs, ask the device to check in, lock a Mac, put a supervised iPhone or iPad into Lost Mode, and erase a device after approval. You switch on only the commands you want, and for which groups of users.

How does Workativ connect to Jamf Pro, and what access does it need?

Through an API role and an API client in Jamf Pro, using OAuth client credentials. The role starts with read privileges for computers, inventory and users. Lock and erase privileges are added only if you want those commands in chat.

Will the agent show a FileVault recovery key in chat?

No. The privilege that reads disk encryption recovery keys is not part of the default role. A request for a key goes to IT with the employee's details, and IT hands it over through its own verified process.

How does Lost Mode work from a chat message?

Jamf's Lost Mode applies to supervised mobile devices, so Jamf Lost Mode needs that setup first. It locks the device, shows a message and a phone number on the lock screen, and records the last known location. The command stays pending until the device is online, so the agent tells the employee that. A lost Mac gets a remote lock instead.

Does an erase need approval?

Yes. The agent asks the approver you name before sending an erase, tells the employee what will be lost, and records who agreed. If the phone turns up first, the employee can cancel before the command goes out.

Do we need Jamf's AI Assistant switched on to use it?

No. Jamf's AI Assistant is opt-in and runs inside Jamf. Workativ reaches Jamf Pro through its API, so it works whether or not that assistant is on. If your admins already use the assistant, the two work side by side.

What is the difference between a Jamf chatbot and a Jamf AI agent?

A chatbot gives an answer and the conversation ends there. An agent looks at the device, chooses the command that fits, gets approval when it is needed, and sends it. Workativ's earlier Jamf chatbot page is about the question side, while this page describes the whole agent.

How long does deployment take?

Three to five days for most teams. Creating the API role is quick. The work is choosing which commands to allow, who approves an erase, and testing on a few real Macs and iPhones.

Which chat platforms does it support, and what can we measure?

Microsoft Teams and Slack, working the same way. The dashboard lists what people ask about most, which commands ran, how many approvals were granted or refused, and which Macs keep failing the same check. Logs can go to your SIEM.

Jamf AI agent that helps staff with their Mac or iPhone in Teams and Slack, and sends the

IT Teams of all sizes trusts Workativ AI to automate IT Operations & Support

Apple device questions are routine, yet each one waits for someone who knows where things live in Jamf.

Mac questions land on a small team

Lost devices need the right command fast

Jamf's AI Assistant faces IT, not staff

Staff ask about the Mac or iPhone in their hands, and the reply is based on its Jamf record.