Bulk deploy Agent Client Collector on macOS using Jamf

task brazil Updated Sep 10, 2026 4 min read bulk-deploy-acc-on-macos.md
Raw file servicenow.com

Use Jamf to install Agent Client Collector (ACC) on multiple macOS devices at once, promoting consistent deployment across your organization.

Before you begin

[Omitted video] Description: Installing ACC on user devices using Jamf

Role required: agent_client_collector_admin

About this task

Your organization might have a different method to deploy ACC.

Procedure

  1. Download the installation package.

    1. Navigate to All > Agent Client Collector > Deployment > Agent Downloads.

    2. Download the appropriate package from the macOS Downloads section, based on the chip type.

  2. Upload the installation package to Jamf Pro.

    1. In the Jamf Pro instance, navigate to Settings > Packages.

    2. Select the New button.

    3. Enter a display name for the package.

    4. Select browse for a file under Filename and select the package.

    5. Select Save.

  3. Update the acc.yml file.

    1. Copy the acc.yml file generated during the local installation to your Desktop location.

    2. Confirm connect-without-mid is set to true.

    3. Confirm that the instance URL is accurate and insert the registration key.

    4. Verify that verify-plugin-signature is set to true.

    5. Save the acc.yml file.

  4. Using the Terminal command line, convert your acc.yml file into a deploy package.

    1. Create a file named yml_package_builder.sh on your Desktop.

    2. Copy the following script into the yml_package_builder.sh file and save it.

      Text
      #!/bin/bash#!/bin/bash# === CONFIGURATION ===PKG_NAME="acc-yml.pkg"INSTALL_PATH="/Library/Application Support/servicenow/agent-client-collector"YML_SOURCE_PATH="$HOME/Desktop/acc.yml" # Assuming you have your ymlfile on the Desktop folder, change it if needed# === CREATE BUILD STRUCTURE ===BUILD_DIR="$HOME/pkgbuild-yml"PAYLOAD_DIR="$BUILD_DIR/payload"# Clean previous buildrm -rf "$BUILD_DIR"mkdir -p "$PAYLOAD_DIR"# Copy YAML file into package payloadcp "$YML_SOURCE_PATH" "$PAYLOAD_DIR/"# === BUILD THE PACKAGE ===pkgbuild \--identifier "com.servicenow.acc.yml" \--install-location "$INSTALL_PATH" \--root "$BUILD_DIR/payload" \"$HOME/Desktop/$PKG_NAME"echo "✅ .pkg created at: $HOME/Desktop/$PKG_NAME"

    3. Run the sh yml_package_builder.sh command from the Terminal.

      Note: The modified acc.yml file and the yml_package_builder.sh file must be saved in the same location (Desktop, for example).

    The file acc-yml.pkg appears on your Desktop.

  5. Upload the yml package to Jamf Pro in the same way you uploaded the installation package.

  6. In the Jamf Pro instance, create a post-install script.

    1. Navigate to Settings > Scripts.

    2. Select the New button.

    3. Enter a display name and complete the form as needed.

    4. On the Script tab, paste the following script for the sudoers file.

      Text
      # === 1. Create sudoers file ===SUDOERS_FILE="/private/etc/sudoers.d/_servicenow"cat <<EOF > "$SUDOERS_FILE"# ServiceNow Agent Collector - Sudoers Configuration for macOS
# Command alias for ServiceNow allowed commands# These commands can be executed by the _servicenow user with sudo privilegesCmnd_Alias SN_ALLOWED = /usr/bin/powermetrics, \                        /usr/bin/mdls, \                        /usr/bin/log, \                        /usr/bin/log show *, \                        /bin/kill, \                        /usr/bin/defaults, \                        /usr/local/bin/jamf, \                        /bin/rm, \                        /bin/ls, \                        /usr/bin/pgrep, \                        /usr/bin/find, \                        /usr/bin/pmset, \                        /usr/bin/open, \                        /Library/Application\ Support/servicenow/agent-client-collector/cache/acc-dex-modules/bin/scripts/sudo/app_freeze.sh, \                        /Library/Application\ Support/servicenow/agent-client-collector/cache/acc-dex-modules/bin/scripts/sudo/zscaler_zpa_reconnect.sh, \                        /Library/Application\ Support/servicenow/agent-client-collector/cache/acc-dex-modules/bin/scripts/sudo/clear_google_chrome_browsing_data.sh, \                        /Library/Application\ Support/servicenow/agent-client-collector/cache/acc-dex-modules/bin/scripts/sudo/services.sh, \                        /Library/Application\ Support/servicenow/agent-client-collector/cache/acc-dex-modules/bin/scripts/sudo/restart_service.sh *, \                        /Applications/Zscaler/Zscaler.app/Contents/PlugIns/zscli, \                        /Library/Application\ Support/servicenow/agent-client-collector/cache/acc-dex-modules/bin/scripts/sudo/elevate_temporary_admin.sh
# ServiceNow user permissions# _servicenow user can run osqueryi and all SN_ALLOWED commands without password# SETENV allows environment variables to be preserved_servicenow ALL=NOPASSWD: SETENV: /Library/Application\ Support/servicenow/agent-client-collector/cache/osquery/bin/osqueryi *, SN_ALLOWED
# Defaults for _servicenow user# !requiretty: Allow sudo without a TTY (required for automated scripts)Defaults:_servicenow !requirettyEOFchmod 440 "$SUDOERS_FILE"echo "[INFO] Sudoers file created at $SUDOERS_FILE"
# === 2. Set permissions for the YAML file ===YML_PATH="/Library/Application Support/servicenow/agent-client-collector/acc.yml"if [ -f "$YML_PATH" ]; thenchmod 644 "$YML_PATH"echo "[INFO] Permissions set on acc.yml"elseecho "[WARN] acc.yml not found at $YML_PATH"fi# === 3. Restart ACC service ===PLIST="/Library/LaunchDaemons/com.sn.acc.plist"if [ -f "$PLIST" ]; thenecho "[INFO] Stopping ACC service..."launchctl unload -w "$PLIST" 2>/dev/nullsleep 2echo "[INFO] Starting ACC service..."launchctl load -w "$PLIST"elseecho "[ERROR] LaunchDaemon not found at $PLIST"fi

    5. Select Save.

  7. Create a Jamf policy and add the created packages and script.

    1. In the Jamf Pro instance, navigate to Inventory > Policies.

    2. Select the New button.

    3. Enter a policy name, then set the trigger and execution frequency.

      • Set Trigger to Recurring Check-in. Add other triggers as needed, for example Login or Enrollment Complete.
      • Set Execution Frequency to Ongoing.

    4. Under Scope, add all the target computers.

    5. Navigate to Packages > Configure and add the installation and acc-yml packages to the record.

      Note: Make sure Install is selected under Action.

    6. Navigate to Scripts > Configure and add the post-install script to the record.

      Note: Make sure After is selected under Priority.

    7. Select Save.

    8. On the Scope tab, add target computers and target users.

    9. Select Save.

  8. To monitor the deployment status, do one of the following:

    • Check the deployment status in the Jamf Pro instance Dashboard.
    • Check the agent status by navigating to All > Agent Client Collector > Agents.
    • Review the log file on the endpoint devices: /Library/Application Support/servicenow/agent-client-collector/log/acc.log.
Search documentation
Search document titles and file paths on the brazil branch