> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Blueprint Parameter IDs

> Match the Parameter IDs that Iru Endpoint API Blueprint endpoints return to the Parameter names shown in the Blueprint Parameters editor.

This guide applies to Mac computers

[Parameters](https://docs.iru.com/en/endpoint/getting-started/blueprints-and-library/configuring-parameters.md) are built-in settings you turn on in a Blueprint to manage Mac computers. The Web App shows each Parameter by name. The [Iru Endpoint Management API](https://api-docs.iru.com/) identifies a Parameter only by its ID. Use this page to match an ID to its name, or to find the ID for a Parameter you want to use.

## How Parameters appear in API responses

These endpoints return Parameters in a `params` object:

* [List Blueprints](https://api-docs.iru.com/#44d3765c-ef17-4226-9104-47e5cef1d370)
* [Get Blueprint](https://api-docs.iru.com/#c0383706-3a41-445c-998f-37a2c1c7ba4a)
* [Create Blueprint](https://api-docs.iru.com/#8ee421a2-c1f8-41ba-9285-8db1b33e092d)
* [Update Blueprint](https://api-docs.iru.com/#4820ba50-291a-4857-b622-77a9ab9cc9e3)
* [Get Blueprint Templates](https://api-docs.iru.com/#da812fd4-278f-4eca-b400-94dfbba91099)

Each key in `params` is a Parameter ID, and each value holds that Parameter's settings for the Blueprint. The response doesn't include Parameter names. This example uses the ID for **Disable NFS Server**:

```json theme={null}
"params": {
  "0264078c-4555-4b7a-bd90-888eae867830": {"mute": false, "daily": false}
}
```

To list the Parameter IDs in a Blueprint, run the command below. It calls [Get Blueprint](https://api-docs.iru.com/#c0383706-3a41-445c-998f-37a2c1c7ba4a) and prints the keys in `params`. Set `API_TOKEN` to your API token. Replace `accuhive.api.kandji.io` with your organization's API URL from **Access**, and replace `BLUEPRINT_ID` with the Blueprint's ID. To create a token and find your API URL, see [Iru API Overview](https://docs.iru.com/en/endpoint/api/iru-api-overview.md#generate-an-api-token).

```bash theme={null}
curl -s "https://accuhive.api.kandji.io/api/v1/blueprints/BLUEPRINT_ID" \
  -H "Authorization: Bearer $API_TOKEN" | jq -r '.params | keys[]'
```

Then match each ID to a name in the tables below.

## Parameter IDs by category

The tables follow the categories and order of the Parameters editor in a Blueprint. Each row gives the Parameter name as it appears in the editor, its subcategory, and its ID. To find an ID, search this page for it. Select an ID to copy it.

### User Accounts & Authentication

| Parameter | Subcategory | ID |
| - | - | - |
| Disable the "root" user | User Accounts | `1e4be748-e072-4c1f-b1ff-a98f076b8e8e` |
| Create user accounts | User Accounts | `bb40515e-4b28-48fc-9596-59c8db14a7a3` |
| Demote user accounts to Standard | User Accounts | `65f7aef7-797d-438e-8537-086772f9b22d` |
| Audit Touch ID settings | User Accounts | `aaee20b6-08ee-40cb-b253-3ed6c1041cab` |
| Ensure users' accounts do not have a password hint | User Accounts | `25bcdc7c-3444-4b13-a06b-92c65030c1c1` |
| Don't allow the Guest user to log in | Guest Account | `56171a5e-27e5-4d6e-86cf-8956ca3b7bca` |
| Remove the Guest user home folder | Guest Account | `370625c0-77fe-4972-bac3-6be812fa4dd7` |
| Don't allow guests to connect to shared folders | Guest Account | `f6b09eeb-a213-4fb5-8b09-1bb4d81583ab` |
| Enforce a custom policy banner | Login Banners | `776f1c86-54ea-4876-a226-a0a07040fec0` |
| Set a CLI login banner | Login Banners | `ccdeac19-fd75-4ce5-a8e6-b3f6b38ffae1` |
| Set a SSH Login Banner | Login Banners | `6b9fc543-0e05-4abc-8ddf-0bc22936b98c` |
| Disable the ability to login to another user's active and locked session | Unlock Options | `58513f4e-be5b-4726-8ed5-a9b337bbd973` |
| Ensure at least one Hot Corner is set to start Screen Saver or put the display to sleep | Session Locking | `3d81acd3-8d3d-4941-a88e-6b8b9147cc6a` |
| Ensure no Hot Corner is set to disable Screen Saver | Session Locking | `1cdcd680-f880-4734-9cac-dec627351478` |
| Reduce sudo timeout period to 0 | Sudo | `da3834d5-c315-4ce0-980e-b650f675b630` |
| Use a separate timestamp for each user/tty combo | Sudo | `2ab1b190-c3b2-4f79-8fea-c5a147a0e564` |
| Ensure logging is enabled for sudo | Sudo | `ea874107-16c0-4e8a-a939-5635e1eabab6` |
| Manage Location Services | Privacy | `51a763db-716c-4bfa-b721-2f303d203b3b` |
| Monitor Location Services | Privacy | `0720f00c-393a-4a66-b676-efa82307ebd4` |
| Show location icon in Control Center when system services request your location | Privacy | `a0579dee-8263-44f4-8452-d3de325fa11f` |
| Manage Dock auto-hiding | Dock | `07cac17b-33b0-4af3-8302-3e5ded562b45` |

### Filesystem

| Parameter | Subcategory | ID |
| - | - | - |
| Show all filename extensions in Finder | Finder | `cc59e3c1-eb02-4021-afa2-50977a30cf0a` |
| Manage the display of hidden files in Finder | Finder | `08323d29-7296-4fc1-8a74-295b3ac2b081` |
| Report user accounts with FileVault Recovery Keys escrowed to iCloud | Disk Encryption | `f228e471-2a6c-4046-b676-02b133a6239d` |
| Report encryption status of attached APFS and CoreStorage volumes | Disk Encryption | `a189df03-cdfd-4c55-b429-95e7df5a7521` |
| Enable System Integrity Protection (SIP) | File and Folder Permissions | `b648790a-0fac-43b8-bd96-5682f60f467e` |
| Check Applications folder for appropriate permissions | File and Folder Permissions | `3b176bde-d7bc-4086-9cfa-1cf8a6d32757` |
| Check Library folder for world writable files | File and Folder Permissions | `2107e444-9421-4ec8-a7d0-67ac23ed555c` |
| Check System folder for world writable files | File and Folder Permissions | `c248f070-6bce-42b1-9688-27d9bf4c1513` |
| Secure home folders | File and Folder Permissions | `7c368d56-88c9-45b4-b9a0-d389febbe027` |
| Set umask for all users | File and Folder Permissions | `e402e27f-f2c8-4f18-8c20-eb0c9e3a591e` |
| Ensure Apple Mobile File Integrity (AMFI) is enabled | File and Folder Permissions | `35b97ede-7e50-40b8-a7a5-dcd61666b15c` |
| Audit that Signed System Volume (SSV) is enabled | File and Folder Permissions | `2dd2be6e-9d5b-46d1-85ba-8e1482c658bd` |
| Disable Spotlight Suggestions | Spotlight | `19b5c13d-ccc7-49f5-9534-8e5c790a2925` |
| Prevent Spotlight from searching specified directories | Spotlight | `648b04c9-8d63-40f3-81b0-167a515864f7` |

### Auditing & Logging

| Parameter | Subcategory | ID |
| - | - | - |
| Enable security auditing | Auditing Policies | `7888dff6-ad41-41f2-8f07-0f7c43a1c993` |
| Set security auditing flags | Auditing Policies | `91e86fb9-1c25-45b0-b1ed-064f8a478409` |
| Set retention for security auditing | Auditing Policies | `cbb3b9c5-2db4-476a-9faa-0c61b7354ec1` |
| Set security auditing maximum log file size | Auditing Policies | `c4215248-df85-4af8-ada1-5afc305a7447` |
| Secure access to audit records | Auditing Policies | `5112c772-bf78-4bf9-81a1-35e45ae2b915` |
| Report Lockdown Mode status | Auditing Policies | `bacaa8d9-23db-49c2-8131-b739ea4d6344` |
| Set retention for install.log | Log Retention | `6e82a850-901a-47ec-9b4e-03393af029c9` |
| Ensure date and time is set automatically | Date & Time | `d011e3a4-eebe-4af2-adf8-aa41c11efacf` |
| Ensure time is within appropriate limits | Date & Time | `986a50bc-7cea-4874-b61c-4b2b9b1c318b` |

### Network

| Parameter | Subcategory | ID |
| - | - | - |
| Manage PF Firewall | Firewall | `8447697d-c47b-4508-968f-d503a2b6fb9f` |
| Manage Screen Sharing | Sharing | `428d99a1-5ab0-4198-b248-7603d1c2e258` |
| Disable Media Sharing | Sharing | `3e41b186-f713-4b71-9f77-bddff07942f8` |
| Disable File Sharing | Sharing | `8ed38311-50d7-4165-890e-ac3bdf55047e` |
| Disable Printer Sharing | Sharing | `ea3bb880-de67-4988-8266-ae2f4f81a05c` |
| Disable Remote Login | Sharing | `e5d41a12-a0be-42c8-ada8-0bc0cec1b465` |
| Disable Remote Management | Sharing | `cf19344c-572a-4359-a7f1-b02db1df1a43` |
| Manage Remote Apple Events | Sharing | `fb63a562-062d-4679-9e16-3dd2453e726d` |
| Disable Internet Sharing | Sharing | `34e7d714-5772-416d-9aff-c467504b45eb` |
| Disable Bluetooth Sharing | Sharing | `86e70b82-c7d6-4266-8a89-104e9dde6a30` |
| Disable DVD and CD Sharing | Sharing | `1fd6eac1-2db4-4520-bfc1-b5f972e392fc` |
| Disable HTTP Server | Sharing | `52ad1967-3d00-4cb3-93c4-92b49b95a446` |
| Disable NFS Server | Sharing | `0264078c-4555-4b7a-bd90-888eae867830` |
| Manage AirDrop | AirDrop | `93335d6f-3007-4648-a3e0-7e081bdccbfd` |
| Disable IPv6 | IPv6 | `c2f95015-c14e-49bd-8d89-27c3f5963dc1` |
| Show Wi-Fi status in menu bar | Wi-Fi | `6d268d72-3859-458c-a413-9a7210b89719` |
| Secure Wi-Fi settings | Wi-Fi | `ec0a818c-42ef-4755-a423-72ed2580838b` |
| Manage Wi-Fi power | Wi-Fi | `4aa511a0-be7d-4819-9c1d-0c781d3bde97` |
| Manage Bluetooth | Bluetooth | `5d78eebc-8552-4f9a-8236-44b9e7a4bff2` |
| Show Bluetooth status in menu bar | Bluetooth | `1fb8d435-3205-429c-9394-868add3e4822` |
| Manage waking the computer with Bluetooth devices | Bluetooth | `7dc0b0ea-26a5-4427-91f5-582c140b3480` |
| Manage Bluetooth setup assistant when no trackpad is connected | Bluetooth | `3c25d52b-f6fd-4619-9d60-5db1ef78223a` |
| Manage Bluetooth setup assistant when no keyboard is connected | Bluetooth | `c4f7759f-af3f-487e-9546-ab5360846b05` |
| Disable Bonjour advertising service | Bonjour | `42a3fdf6-3774-4f56-9fde-c286760a48bf` |
| Manage SSH Config | SSH | `3a192a9a-3452-4357-8674-685b767eb116` |

### Hardware

| Parameter | Subcategory | ID |
| - | - | - |
| Ensure EFI version is valid and being regularly checked | EFI | `e5decad7-7cbf-49b4-99b0-d7e94a21fa47` |
| Restart after x number of days of continuous uptime | Uptime | `a1674edc-f788-424d-addc-dea91f3053f3` |
| Disable media auto actions | Media | `00f687b0-c28e-4f4f-903a-35e373500fd6` |

### macOS Applications & Services

| Parameter | Subcategory | ID |
| - | - | - |
| Report available macOS updates | Software Update | `135b1c65-a665-431b-b919-39e984d6d29d` |
| Disable the automatic run of safe files in Safari | Safari | `f1f19efe-75a1-4ade-8456-8da539433728` |
| Show Status Bar in Safari | Safari | `8ac759cf-cd9a-45fd-be5c-85b7d2302e88` |
| Manage Safari Location Services | Safari | `8c6b6864-3faa-47f1-b599-e13bb04682ed` |
| Enable Secure Keyboard Entry | Terminal | `d19e2f27-6ddb-41b1-b76a-1662b6330cd1` |
| Report user accounts that are signed into iCloud | iCloud | `1636e014-eee6-4858-b508-24594a4b521d` |
| Set hibernate (standbydelay) | Energy Saver | `4911ed60-3c2d-40ba-a5ca-33306f1d1245` |
| Require an administrator password to access system-wide preferences | System Preferences | `0f692ac3-670e-4ee2-b207-3604bd54e32c` |
| Monitor Time Machine status | Time Machine | `e9c1d35c-55f1-4ab9-9081-2865091b1fb2` |
| Monitor encryption status of Time Machine volumes | Time Machine | `93384921-61aa-46f6-a7d9-d45908babccc` |
| Ensure XProtect is running and up to date | XProtect | `f0adf0f1-fea4-42c0-b911-304eb5598adf` |

## Related Articles

> [card] [Configuring Parameters](https://docs.iru.com/en/endpoint/getting-started/blueprints-and-library/configuring-parameters.md)
>
> Turn on the Parameters these IDs stand for in a Blueprint.

> [card] [Iru API Overview](https://docs.iru.com/en/endpoint/api/iru-api-overview.md)
>
> Create the API token you use to call the Blueprint endpoints.

> [card] [Blueprint Color Codes](https://docs.iru.com/en/endpoint/api/blueprint-color-codes.md)
>
> Set a Blueprint's color when you create or update it through the API.

> [card] [Blueprint Icon Codes](https://docs.iru.com/en/endpoint/api/blueprint-icon-codes.md)
>
> Set a Blueprint's icon when you create or update it through the API.


## Related topics

- [Blueprint Color Codes](https://docs.iru.com/en/endpoint/api/blueprint-color-codes.md)
- [Blueprint Icon Codes](https://docs.iru.com/en/endpoint/api/blueprint-icon-codes.md)
- [Creating a Blueprint](https://docs.iru.com/en/endpoint/blueprints/assignment-maps/creating-a-blueprint.md)