# Retrieve restriction settings applied to a managed device

gets the restriction of the device

## Endpoint

`GET /api/v1/mdm/devices/{device_id}/restrictions`

## Request URL

`https://`[*{serverurl}*](https://www.manageengine.com/mobile-device-management/help/api/cloud/oauth-authentication-endpoint-domain.html)`/api/v1/mdm/devices/{device_id}/restrictions`

## Scope

`MDMOnDemand.MDMInventory.READ`

## Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Request Headers

- **Accept** (`string`, Mandatory): `application/json`

### Path Parameters

- **device_id** (`string`, Mandatory): Unique identifier of the device. Obtain from the [Get Device List](https://www.manageengine.com/mobile-device-management/help/api/cloud/devices-get-device-list.html) response

### Query Parameters

- **limit** (`integer`, Optional): Maximum number of records to return in a single response. Used together with offset for pagination
- **skip-token** (`string`, Optional): Pagination continuation token returned by a previous response. Pass it to fetch the next page of results
- **offset** (`integer`, Optional): Zero-based index of the first record to return. Used together with limit for pagination
- **delta-token** (`string`, Optional): Token used for delta/incremental fetches. Pass the token returned from a previous response to retrieve only items modified since that point
- **searchkey** (`string`, Optional): Value to search for. Must be used in combination with searchfield to specify which field is searched
- **searchfield** (`string`, Optional): Name of the field to search against. Used together with searchkey (e.g., name, email, udid)
- **is_allowed_apps** (`boolean`, Optional): Set to true to return apps from the allow list, false to return apps from the block list
- **is_app_purchased_from_portal** (`boolean`, Optional): Set to true to restrict results to apps purchased through the enterprise app portal (VPP/managed Google Play). Default: false
- **search** (`string`, Optional): Free-text search string applied to the default searchable fields of the resource
- **app_scope** (`string`, Optional): Filter applications by their assignment scope. Allowed values: 1=All, 2=Assigned to groups, 3=Assigned to devices
- **platform** (`string`, Optional): Filter results by device platform. Allowed values: 1=iOS, 2=Android, 3=Windows, 4=macOS, 6=tvOS

## Sample Request

```curl
curl --request GET \
  --url https://appdomain/api/v1/mdm/devices/{device_id}/restrictions \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response Body: `application/json`

- **JSON object**
  - **allow_inapp_purchase** (`integer`): In-app purchase: 0 - Restricted, 1 - Allowed
  - **allow_app_removal** (`integer`): App removal: 0 - Restricted, 1 - Allowed
  - **allow_news** (`integer`): News: 0 - Restricted, 1 - Allowed
  - **allow_profile_installation** (`integer`): Profile installation: 0 - Restricted, 1 - Allowed
  - **allow_airdrop** (`integer`): AirDrop: 0 - Restricted, 1 - Allowed
  - **allow_cloud_backup** (`integer`): Cloud backup: 0 - Restricted, 1 - Allowed
  - **allow_assistant** (`integer`): Siri: 0 - Restricted, 1 - Allowed
  - **allow_safari** (`integer`): Safari browser: 0 - Restricted, 1 - Allowed
  - **camera** (`integer`): Camera (Windows/Android): 0 - Restricted, 1 - Allowed
  - **bluetooth** (`integer`): Bluetooth (Windows): 0 - Restricted, 1 - Allowed
  - **browser** (`integer`): Browser (Windows): 0 - Restricted, 1 - Allowed
  - **copy_paste** (`integer`): Copy/paste (Windows): 0 - Restricted, 1 - Allowed
  - **screen_capture** (`integer`): Screen capture (Windows): 0 - Restricted, 1 - Allowed
  - **allow_autofill** (`integer`): Browser autofill: 0 - Restricted, 1 - Allowed
  - **allow_cookies** (`integer`): Browser cookies: 0 - Restricted, 1 - Allowed
  - **allow_popups** (`integer`): Browser pop-ups: 0 - Allowed, 1 - Restricted
  - **knox_restricions** (`JSON object`): Samsung Knox-specific restriction settings

## Possible Response Codes

- **200** (`HTTP code`)

## Sample Response: HTTP 200

iOS, Android, Windows, and Knox restriction settings

```json
{
  "knox_restricions": {
    "allow_camera": "1",
    "allow_wifi": "-1",
    "allow_bluetooth": "-1",
    "allow_screen_capture": "0"
  },
  "allow_assistant": 1,
  "allow_popups": 0,
  "allow_safari": 1,
  "allow_inapp_purchase": 0,
  "allow_cloud_backup": 1,
  "allow_app_removal": 1,
  "allow_airdrop": 0,
  "allow_news": 0,
  "allow_cookies": 1,
  "bluetooth": 0,
  "copy_paste": 0,
  "allow_autofill": 0,
  "browser": 1,
  "screen_capture": 0,
  "allow_profile_installation": 0,
  "camera": 1
}
```

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 250 | **Lock period:** 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.