# Returns the list of local admin accounts excluded from admin-rights removal

Returns the discovery and remediation exclusion configuration, including every local admin account that is protected from the Remove Admin Rights operation.

## Endpoint

`GET /dcapi/appctrl/discovery/exclusionconf`

## Request

### Request URL

https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/dcapi/appctrl/discovery/exclusionconf

### Scope

`DesktopCentralCloud.AppControl.READ`

### Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

- **Accept** (`string`, Mandatory): `application/discoveryandremediation.v1+json`

### Sample Request

```curl
curl --request GET \
  --url https://appdomains/dcapi/appctrl/discovery/exclusionconf \
  --header 'Accept: application/discoveryandremediation.v1+json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response Body: `application/json`

- JSON Object
  - **discId** (`string`): Discovery configuration ID
  - **customerId** (`string`): Customer identifier
  - **createdBy** (`string`): User ID who created the configuration
  - **modifiedBy** (`string`): User ID who last modified the configuration
  - **lastModifiedOn** (`string`): Last modification timestamp in milliseconds since epoch
  - **type** (`integer`): Type of discovery and remediation configuration (`1=Automatic`, `2=Manual`)
  - **customGroupIds** (`array`): Array of custom group IDs associated with the configuration (empty if none)
  - **localAdminUsers** (`JSON Array`): Array of local admin users excluded from admin rights removal

### HTTP Code 500

Response Body: `application/json`

- JSON Object
  - **errorCode** (`string`): Internal error code: `INTERNAL_ERROR` when exception occurs fetching exclusion data
  - **errorMessage** (`string`): Detailed message: Unable to fetch discovery and remediation data

### Possible Response Codes

- **200**: HTTP code
- **500**: HTTP code

### Sample Response: HTTP 200

Discovery exclusion configuration with excluded admin accounts

```json
{
  "discId": "1",
  "customGroupIds": [],
  "createdBy": "6301",
  "customerId": "1",
  "modifiedBy": "6301",
  "type": 2,
  "localAdminUsers": [
    {
      "buildInAdminUser": false,
      "resourceId": null,
      "domain": null,
      "resourceCount": null,
      "fullName": null,
      "userName": "sysadmin",
      "userId": null,
      "sId": null
    },
    {
      "buildInAdminUser": false,
      "resourceId": null,
      "domain": null,
      "resourceCount": null,
      "fullName": null,
      "userName": "emsadmin",
      "userId": null,
      "sId": null
    },
    {
      "buildInAdminUser": true,
      "resourceId": null,
      "domain": null,
      "resourceCount": null,
      "fullName": null,
      "userName": "Administrator",
      "userId": null,
      "sId": null
    }
  ],
  "lastModifiedOn": "1737657797133"
}
```

### Sample Response: HTTP 500

Internal error while fetching exclusion configuration

```json
{
  "errorMessage": "Unable to fetch discovery and remediation data",
  "errorCode": "INTERNAL_ERROR"
}
```

## Rate Limits

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 60 | **Lock period:** 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.