Jamf Custom Settings Schema - macOSLAPS.json

gistfile1.txt

{
	"title": "macOSLAPS Settings",
	"description": "Preference Domain: edu.psu.macoslaps",
	"__version": "1.0",
	"__feedback": "[email protected]",
	"type": "object",
	"options": {
		"remove_empty_properties": true
	},
	"definitions": {
		"policy_group": {
			"type": "object",
			"format": "grid",
			"options": {
				"collapsed": true,
				"disable_properties": true
			}
		}
	},
	"properties": {
		"LocalAdminAccount": {
			"title": "Local Administrator Account",
			"description": "The account name of the local administrator account you would like to use with LAPS",
			"propertyOrder": 10,
			"anyOf": [{
					"type": "null",
					"title": "Not Configured"
				},
				{
					"title": "Configured",
					"type": "string"
				}
			]
		},
		"DaysTillExpiration": {
			"title": "Days till Expiration of LAPS Password",
			"description": "The amount of time in days until the password is expired and will change on a check-in (Default is 60 days)",
			"propertyOrder": 20,
			"anyOf": [{
					"type": "null",
					"title": "Not Configured"
				},
				{
					"title": "Configured",
					"type": "integer"
				}
			],
            "default": 60
		},
		"PasswordLength": {
			"title": "Length of the generated Password",
			"description": "How long the generated password will be (Default is 12 characters)",
			"propertyOrder": 30,
			"anyOf": [{
					"type": "null",
					"title": "Not Configured"
				},
				{
					"title": "Configured",
					"type": "integer"
				}
			],
            "default": 12
		},
		"RemoveKeychain": {
			"title": "Remove the keychain for the local administrator",
			"description": "If set to Yes, the keychain for the local adminsitrator will be deleted once the password has been changed (Default is Yes)",
			"propertyOrder": 40,
			"anyOf": [{
					"type": "null",
					"title": "Not Configured"
				},
				{
					"title": "Configured",
					"type": "boolean"
				}
			],
            "default": true,
            "enum": [false, true],
            "options": {
                "enum_titles": ["No", "Yes"]
            }
		},
		"RemovePassChars": {
			"title": "Remove these characters from the generated password",
			"description": "Any characters defined in this field will be removed from any generated password",
			"propertyOrder": 50,
			"anyOf": [{
					"type": "null",
					"title": "Not Configured"
				},
				{
					"title": "Configured",
					"type": "string"
				}
			]
		},
		"ExclusionSets": {
			"title": "Sets of characters to exclude",
			"description": "Any options defined here will remove that entire set of charcters from any generated password",
			"propertyOrder": 60,
			"anyOf": [{
					"type": "null",
					"title": "Not Configured"
				},
				{
					"title": "Configured",
					"type": "array",
					"items": {
                        "type": "string",
                        "enum": ["letters", "numbers", "symbols"],
                        "options": {
                            "enum_titles": ["Letters", "Numbers", "Symbols"]
                        }
                    },
					"minItems": 1,
                    "maxItems": 3
                }]
    	},
    	"PreferredDC": {
    		"title": "Preferred Domain Controller",
    		"description": "If defined, this server will be used when performing password changes. Useful when you have RODC (Read Only Domain Controllers)",
    		"propertyOrder": 70,
    		"anyOf": [{
    				"type": "null",
    				"title": "Not Configured"
    			},
    			{
    				"title": "Configured",
    				"type": "string"
    			}
    		]
    	},
        "FirstPass": {
            "title": "First Password",
            "description": "Enter the password intially set to your administrator account that you want to use with LAPS that was created with a secureToken",
            "propertyOrder": 80,
            "anyOf": [{
                    "type": "null",
                    "title": "Not Configured"
                },
                {
                    "title": "Configured",
                    "type": "string"
                }
            ]
        }
    }
}