Lists all Just-In-Time (JIT) policies with associated metadata

Open in ChatGPT Open in ChatGPT to ask questions about this page
Open in Claude Open in Claude to ask questions about this page
Copy as MarkdownCopy this page as markdown to use with AI assistants
View as Markdown Open this page as markdown in a new tab

Returns a list of all JIT policies configured in the system, including each policy's ID, name, description, associated application group, and other relevant metadata. Use this API to retrieve JIT policy information for display in management consoles or for use in automation scripts.

Endpoints

Request URL

https://{serverurl}/dcapi/appctrl/jitpolicies

Scope

DesktopCentralCloud.AppControl.READCopied!

Header

Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Request Headers

Content-TypestringMandatory
application/jsonapplication/jsonCopied!
AcceptsstringMandatory
application/jsonapplication/jsonCopied!

- Query Parameters

statusstringOptional

Filters policies by status. Accepted values: 1 - Yet to deploy, 2 - Published, 4 - Agent Request, 5 - Declined, 6 - Approved

resourceNamestringOptional

Filters by resource name

domainNamestringOptional

Filters by NetBIOS domain name

policyTypestringOptional

Filters by policy category/type. Accepted values: 1 - ACPJitElevate, 2 - ACPJitAccess

durationTypestringOptional

Filters by access duration mode. Accepted values: Fixed, 1,Window, 2

expiryTimelongOptional

Filters policies that expire at or before the given time. Format: Unix epoch in milliseconds. Example: 1718620800000

pageintegerOptional

Page number for paginated responses. (Maximum of 50 Records/Page)

numberOfDaysintegerOptional

Filters records from the last N days (rolling window) (Maximum 365 Days).

Sample Request

Curl
Java
Python
Deluge
PowerShell
Copied!
curl --request GET \
  --url https://appdomains/dcapi/appctrl/jitpolicies \
  --header 'Accepts: application/json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52' \
  --header 'Content-Type: application/json'

Response Parameters

- HTTP code 200

Response Body - application/json
JSON Object
Hide Sub-Attributes
pagestring

Current page number of the paginated result

totalPagesinteger

Total number of pages available

temporaryAccessDetailsJSON Array

List of temporary access (JIT) policies

Show Sub-Attributes
JSON Object
Show Sub-Attributes
policyIDstring

Unique identifier for the temporary access policy

policyNamestring

Display name of the temporary access policy

platforminteger

Platform (Windows, Mac)

policyTypestring

Type of policy (e.g., ACPJitElevate for privilege elevation, ACPJitAllow for allowing blocked apps)

createdTimelong

Creation timestamp in milliseconds since epoch

modifiedTimelong

Last modification timestamp in milliseconds since epoch

createdUserstring

Username of the user who created the policy

modifiedUserstring

Username of the user who last modified the policy

durationTypeinteger

How the duration is specified (1=Fixed minutes, 2=Date range)

durationMinutesstring

Access window length in minutes (applicable when durationType=1)

durationFromlong

Start time in timestamp (null when durationType=1)

durationTolong

End time in timestamp (null when durationType=1)

agentStatusstring

Deployment status of the policy on the agent (e.g., Succeeded, Yet to deploy, Failed)

expiryTimelong

Policy expiry timestamp in milliseconds since epoch

machineNamestring

Name of the target computer where the policy is applied

riskScoredouble

Risk score associated with the target machine

reasonstring

Reason provided by the agent during the JIT elevation request. (Empty if the JIT policy was created by an administrator.)

- HTTP code 401

Response Body - application/json
JSON Object
Hide Sub-Attributes
errorCodestring

Error code: INVALID_REQUEST for validation failures

errorMessagestring

Detailed validation error message

- HTTP code 500

Response Body - application/json
JSON Object
Hide Sub-Attributes
errorCodestring

Internal error code: INTERNAL_ERROR when exception occurs While getting jit policies

errorMessagestring

Detailed message: Exception Occurred While getting jit policies

Possible Response Codes

200HTTP code
401HTTP code
500HTTP code

Sample Response: HTTP 200

List of JIT policies

Copied!
  {
    "totalPages": 1,
    "page": 1,
    "temporaryAccessDetails": [
      {
        "modifiedTime": "2026-06-22 08:26:50",
        "reason": "Browsing",
        "durationFrom": null,
        "modifiedUser": "admin",
        "policyName": "JIT For Ulaa",
        "durationTo": null,
        "durationType": "Fixed",
        "agentStatus": "Failed",
        "jitAccessType": "Specific Apps",
        "platform": "Windows",
        "machineName": "uexxxxxest",
        "durationMinutes": "60",
        "policyID": "902",
        "policyType": "ACPJitElevate",
        "expiryTime": "2026-06-22 09:26:50",
        "createdTime": "2026-06-17 12:03:28",
        "riskScore": 3.3,
        "createdUser": "DC-SYSTEM-USER"
      },
      {
        "modifiedTime": "2026-06-22 08:26:48",
        "reason": "--",
        "durationFrom": null,
        "modifiedUser": "admin",
        "policyName": "JIT For Google Chrome",
        "durationTo": null,
        "durationType": "Fixed",
        "agentStatus": "Failed",
        "jitAccessType": "Specific Apps",
        "platform": "Windows",
        "machineName": "uexxxxxtest",
        "durationMinutes": "60",
        "policyID": "901",
        "policyType": "ACPJitElevate",
        "expiryTime": "2026-06-22 09:26:48",
        "createdTime": "2026-06-17 12:03:26",
        "riskScore": 3.3,
        "createdUser": "DC-SYSTEM-USER"
      }
    ]
  }
                
Show full

Sample Response: HTTP 401

Authentication credentials missing or invalid

Copied!
  {
    "errorMessage": "Authentication credentials are missing or invalid",
    "errorCode": "UNAUTHORIZED"
  }
                
Show full

Sample Response: HTTP 500

Internal error while fetching jit policies

Copied!
  {
    "errorMessage": "Exception Occurred While getting jit policies",
    "errorCode": "INTERNAL_ERROR"
  }
                
Show full

Duration: 1 minute | Threshold: 50 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.