imper.ai

Appearance

Integrating Iru with imper.ai

Overview ​

Integrating Iru with imper.ai allows the platform to securely push ephemeral data-collection scripts to your managed Apple devices through your existing Iru tenant.

Once connected, imper.ai creates a dedicated Custom Script Library Item scoped to a Blueprint of your choice, runs the collector during normal device check-ins, and removes the item once collection completes — leaving no persistent artifact on the device.

This article walks you through the required prerequisites and the steps for creating an API token, granting the required permissions, identifying the target Blueprint(s), and completing the integration inside imper.ai.

NOTE

Kandji has rebranded to Iru. The Iru web app and API URLs may still display "kandji" during the transition (e.g., *.api.kandji.io). This is expected and does not affect the integration.

Prerequisites ​

To integrate Iru with imper.ai, you must have Iru tenant admin permissions (or equivalent privileges to create API tokens and manage Blueprints) via the Iru web app.

We also recommend creating a dedicated Blueprint for imper.ai (e.g., imper-collectors) and assigning the devices you want imper.ai to manage to it. This ensures imper.ai's scripts are scoped only to that Blueprint and never touch your other configurations.

Setup ​

Step 1: Create an API token in Iru ​

  1. Using an Iru admin user, log in to your Iru web app.

  2. Click the Access tab.

  3. Click the Add API Token tab.

  4. Enter a Name (e.g., imper.ai) and a Description, then click Create.

  5. Copy the generated API Token to a secure location — this token needs to be entered later in imper.ai's integration interface.

    Important: The token is displayed only once. If you lose it, you must revoke it and generate a new one.

  6. Copy the API URL displayed on the Access page. It will follow one of these formats:

    • US tenants: https://<subdomain>.api.kandji.io
    • EU tenants: https://<subdomain>.api.eu.kandji.io

Step 2: Configure API token permissions ​

After creating the token, you must grant it the specific permissions imper.ai requires. On the token's permissions page, enable only the following:

Blueprints:

  • Get Blueprint
  • List Blueprints
  • Update Blueprint
  • List Library Items
  • Assign Library Items

Custom Scripts (enable all):

  • Create Custom Script
  • Update Custom Script
  • List Custom Scripts
  • Get Custom Script
  • Delete Custom Script

Devices:

  • Device ID
  • Device List
  • Device Details
  • Device Status
  • Device Activity
  • Device Library Items
  • Device Parameters

Device Actions:

  • Send Blank Push

Click Save to apply the permissions.

Note: imper.ai requires no permissions beyond those listed above. Granting additional permissions does not enable additional functionality and is not recommended.

Step 3: Connect Iru to imper.ai ​

  1. Locate Iru and click Connect.
  2. In the integration dialog, fill in the API URL and API Token obtained in Step 1.
  3. Click Connect. imper.ai will validate the credentials and verify the token permissions.
  4. Once validated, choose one of two setup options: Set Blueprint or Set Assignment ID.

Choose a setup option ​

Option 1: Set Blueprint ​

  1. Start typing to search for one or more Blueprints by name, then select them.
  2. Click Save to begin monitoring all devices included in the selected blueprints.

Iru Integration dialog showing Set Blueprint option with blueprint name selection

Option 2: Set Assignment ID ​

Before extracting an Assignment ID, make sure the assignment map includes conditional logic that scopes the script to the devices you want imper.ai to monitor. If no conditional logic exists yet, add it.

Iru Integration dialog showing Set Assignment ID option with ID input field

Step 1: Tag the devices you want to monitor ​

Use the Tag feature in Iru to label the devices you want monitored by imper.ai. For example, apply the tag imper-verification to those devices.

Step 2: Add conditional logic to the assignment map ​

  1. Navigate to Blueprint → Assignment Map.
  2. Click Add conditional logic.
  3. Add an assignment rule to limit which devices in the blueprint receive the library item, using the following condition:
    • Input: Tags
    • Operator: contains one of
    • Value: imper-verification

Step 3: Extract the Assignment ID ​

  1. Navigate to Blueprint → Assignment Map.
  2. Press and hold the Option key on your keyboard. The assignment_node_id becomes visible on the node.
  3. Click Copy, then paste the ID into the dialog.

Step 4: Save ​

Click Save to begin monitoring only the devices tagged imper-verification.

Managing the Integration ​

Adding or changing Blueprints ​

You can update the Blueprints assigned to the imper.ai integration at any time without re-entering your API credentials.

  1. Navigate to the imper.ai admin integrations page.
  2. Locate Iru and click Edit.
  3. Add or remove Blueprints using the search field.
  4. Click Save to apply the changes. imper.ai will immediately begin scoping scripts to the updated Blueprint selection.

NOTE: Removing a Blueprint from the integration stops imper.ai from deploying new scripts to devices in that Blueprint. It does not affect devices in Blueprints that remain selected.

Need help or have a question? support@imper.ai

Copyright © Imper AI