Before
The responsible team likely had to check available macOS versions in Jamf, determine which devices were below the target, update the relevant computer group, and compile the affected device list. They then had to move between Jamf and Slack to request confirmation, communicate the scope, launch the update, and post status updates.
How it works
- Start the recurring update review, notify the responsible team, and present the available macOS versions for selection.
- Apply the selected version as the computer-group criterion, retrieve and format the affected device list, and request explicit approval.
- Launch the managed update plan when approved, or record that the process was aborted when declined, then update the Slack thread with the result.
Workflow details
- Scheduled notification: The workflow starts on its recurring schedule, retrieves a Jamf Pro authentication token, and notifies the responsible team in a Slack message thread that an update review is beginning.
- Version selection: It retrieves the available macOS managed update versions and creates an interactive Slack selector so the team can choose the target version without manually looking up or copying version information.
- Target identification: After a version is selected, the workflow updates the managed computer group criteria to identify devices running an older macOS version, retrieves the affected computers, converts the response into usable data, and formats the device names for review.
- Approval gate: Slack displays the selected version and the devices that would be updated, then pauses for an explicit human confirmation. A rejection ends the process and marks the thread as aborted without launching an update.
- Update execution and reporting: When approved, the workflow creates a managed software update plan for the targeted group using the selected macOS version, configured to download and install it with up to one deferral, then updates the Slack thread with the approved version and device list.
What changed
The workflow now performs the Jamf lookups, group targeting, device-list preparation, and Slack communications automatically in one thread. Human involvement is limited to selecting the target version and approving the displayed device scope before the update plan is launched.
Work removed
Manually checking available macOS versions, preparing a version-selection message, editing the outdated-device group criteria, retrieving and compiling affected computer names, and posting repeated Slack status and approval messages.
Expected outcome
Each recurring run removes at least four recurring coordination actions across Jamf and Slack while preserving a human approval step before updates are scheduled.
