Set_Remove_App_When_MDM_Removed.py

#!/usr/bin/env python3
# Matthew Prins 2024
# https://github.com/MatthewPrins/Jamf/

# check as TRUE "Remove app when MDM profile is removed" for all apps where it is currently FALSE
# pip install requests if not already done

import json
import requests
from datetime import datetime

############################
# Editable variables

# Jamf credentials
username="xxxxxx"
password="xxxxxx"
jamfurl="https://xxxxxx.jamfcloud.com"

############################

# definition for fetching API token
def fetchtoken():
	response = requests.post(url=jamfurl + "/api/v1/auth/token", headers={'Accept': 'application/json'}, auth=(username, password))
	print("new token fetched\n")
	return response.json()['token'], datetime.strptime(response.json()['expires'], '%Y-%m-%dT%H:%M:%S.%fZ')

# definition for invalidating API token
def invalidatetoken():	
	response = requests.post(url=jamfurl + "/api/v1/auth/invalidate-token", headers={'Authorization': 'Bearer ' + token})	
	
############################
	
# get initial token	
token,tokenexpiration = fetchtoken()

# import mobile app data from API as a dictionary
response = requests.get(jamfurl + "/JSSResource/mobiledeviceapplications", headers={'Accept': 'application/json','Authorization': 'Bearer ' + token})
appdictionary = json.loads(response.text)

# iterate through ids in appdictionary and add to idlist
idlist=[]
for entry in appdictionary["mobile_device_applications"]:
	idlist.append(entry["id"]) 
	
print (str(len(idlist)) + " apps\n")
print ('Apps updated to TRUE for "Remove app when MDM profile is removed":')

#iterate through all apps
for id in idlist:

	#get current app status on app removal when MDM is removed
	response = requests.get(jamfurl + "/JSSResource/mobiledeviceapplications/id/" + str(id), headers={'Accept': 'application/json','Authorization': 'Bearer ' + token})
	appname = json.loads(response.text)["mobile_device_application"]["general"]["name"]

	#for apps where it is FALSE, update to TRUE
	if not json.loads(response.text)["mobile_device_application"]["general"]["remove_app_when_mdm_profile_is_removed"]:
		response = requests.put(jamfurl + "/JSSResource/mobiledeviceapplications/id/" + str(id), data="<mobile_device_application><general><remove_app_when_mdm_profile_is_removed>true</remove_app_when_mdm_profile_is_removed></general></mobile_device_application>", headers={'Accept': 'application/xml','Authorization': 'Bearer ' + token})
		print (appname)

print ("done!")
exit()