# Add a new Work Data Security payload configuration to an existing profile

Create Android Workdata security policy payload

## Endpoints

**POST** `/api/v1/mdm/profiles/{profile_id}/payloads/androidworkdatasecuritypolicy`

## Request URL

`https://{serverurl}/api/v1/mdm/profiles/{profile_id}/payloads/androidworkdatasecuritypolicy`

## Scope

`MDMOnDemand.MDMDeviceMgmt.CREATE`

## Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Request Headers

- **Content-Type** `string` **Mandatory**: `application/json`
- **Accept** `string` **Mandatory**: `application/json`

### Path Parameters

- **profile_id** `string` **Mandatory**

  Unique identifier of the profile. Obtain from the [Create Profile](https://www.manageengine.com/mobile-device-management/help/api/cloud/profiles-create-profile.html) or [Get Profiles](https://www.manageengine.com/mobile-device-management/help/api/cloud/profiles-get-profile.html) response

### Request Body

`application/json`

`JSON object`

- **allow_share_doc_to_work_profile** `boolean` *Optional*

  Whether sharing documents to the work profile is allowed. Default: false

- **allow_share_doc_to_personal_apps** `boolean` *Optional*

  Whether sharing documents to personal apps is allowed. Default: false

- **allow_profile_content_to_other_apps** `boolean` *Optional*

  Whether work profile content can be shared with other apps. Default: false

- **allow_profile_contact_over_bluetooth** `boolean` *Optional*

  Whether work profile contacts are accessible over Bluetooth. Default: false

- **allow_profile_app_widgets_to_home_screen** `boolean` *Optional*

  Whether work profile app widgets can be placed on the home screen. Default: false

- **allow_contact_in_personal_profile** `boolean` *Optional*

  Whether work contacts are visible in the personal profile. Default: false

- **allow_contact_access_to_personal_apps** `boolean` *Optional*

  Whether personal apps can access work contacts. Default: false

- **allow_connected_apps** `integer` *Optional*

  Whether connected apps (cross-profile communication) are allowed. 0 = Not Allowed. Default: 0

- **allowed_apps** `JSON array` *Optional*

  List of apps allowed for cross-profile data sharing

- **allow_crossprofile_copy_paste** `integer` *Optional*

  Whether cross-profile copy-paste is allowed. 0 = Not Allowed. Default: 0

- **allow_crossprofile_data_sharing** `integer` *Optional*

  Whether cross-profile data sharing is allowed. 0 = Not Allowed. Default: 0

- **workprofile_turnoff_timeout** `integer` *Optional*

  Work profile auto-turnoff timeout in minutes. 0 = No Timeout. Default: 0

- **enable_work_profile_system_apps** `array` *Optional*

  List of system apps enabled in the work profile (values 1-5)

## Sample Request

```curl
curl --request POST \
  --url https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/androidworkdatasecuritypolicy \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52' \
  --header 'Content-Type: application/json' \
  --data '{}'
```

## Sample Request Body

Add Work Data Security payload to the profile

```json
{
  "allow_crossprofile_copy_paste": 0,
  "allow_profile_contact_over_bluetooth": false,
  "allow_contact_access_to_personal_apps": false,
  "allow_connected_apps": 0,
  "allow_share_doc_to_personal_apps": false,
  "allow_profile_app_widgets_to_home_screen": false,
  "allowed_apps": [],
  "allow_contact_in_personal_profile": false,
  "allow_profile_content_to_other_apps": false,
  "allow_share_doc_to_work_profile": false
}
```

## Response Parameters

### HTTP code 200

#### Response Body

`application/json`

`JSON object`

- **payload_id** `long`

  Unique identifier for the created payload item

- **allow_share_doc_to_work_profile** `boolean`

  Whether sharing documents to the work profile is allowed. Default: false

- **allow_share_doc_to_personal_apps** `boolean`

  Whether sharing documents to personal apps is allowed. Default: false

- **allow_profile_content_to_other_apps** `boolean`

  Whether work profile content can be shared with other apps. Default: false

- **allow_profile_contact_over_bluetooth** `boolean`

  Whether work profile contacts are accessible over Bluetooth. Default: false

- **allow_profile_app_widgets_to_home_screen** `boolean`

  Whether work profile app widgets can be placed on the home screen. Default: false

- **allow_contact_in_personal_profile** `boolean`

  Whether work contacts are visible in the personal profile. Default: false

- **allow_contact_access_to_personal_apps** `boolean`

  Whether personal apps can access work contacts. Default: false

- **allow_connected_apps** `integer`

  Whether connected apps (cross-profile communication) are allowed. 0 = Not Allowed. Default: 0

- **allowed_apps** `JSON array`

  List of apps allowed for cross-profile data sharing

- **allow_crossprofile_copy_paste** `integer`

  Whether cross-profile copy-paste is allowed. 0 = Not Allowed. Default: 0

- **allow_crossprofile_data_sharing** `integer`

  Whether cross-profile data sharing is allowed. 0 = Not Allowed. Default: 0

- **workprofile_turnoff_timeout** `integer`

  Work profile auto-turnoff timeout in minutes. 0 = No Timeout. Default: 0

- **enable_work_profile_system_apps** `array`

  List of system apps enabled in the work profile (values 1-5)

## Possible Response Codes

- **200** `HTTP code`

## Sample Response: HTTP 200

Work Data Security payload successfully added

```json
{
  "allow_crossprofile_copy_paste": 0,
  "payload_id": 9007199254741000,
  "allow_profile_contact_over_bluetooth": false,
  "allow_contact_access_to_personal_apps": false,
  "allow_connected_apps": 0,
  "allow_share_doc_to_personal_apps": false,
  "allow_profile_app_widgets_to_home_screen": false,
  "allowed_apps": [],
  "allow_contact_in_personal_profile": false,
  "allow_profile_content_to_other_apps": false,
  "allow_share_doc_to_work_profile": false
}
```

## Rate Limit

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.