Returns the privilege elevation application group and its rules

Returns the privilege application group containing applications configured for privilege elevation, including each rule's appRuleID.

Endpoints

get /dcapi/appctrl/privilegeAppGroup

Copy full URL

Request URL

https://{serverurl}/dcapi/appctrl/privilegeAppGroup

Scope

DesktopCentralCloud.AppControl.READCopied!

Header

Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Request Headers

AcceptstringMandatory

application/getPrivilegeAppGroup.v1+jsonCopied!

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomains/dcapi/appctrl/privilegeAppGroup \
  --header 'Accept: application/getPrivilegeAppGroup.v1+json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomains/dcapi/appctrl/privilegeAppGroup"))
        .header("Accept", "application/getPrivilegeAppGroup.v1+json")
        .header("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomains")

headers = {
    'Accept': "application/getPrivilegeAppGroup.v1+json",
    'Authorization': "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52"
    }

conn.request("GET", "/dcapi/appctrl/privilegeAppGroup", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/getPrivilegeAppGroup.v1+json");

    response = invokeUrl
    [
        url: "https://appDomains/dcapi/appctrl/privilegeAppGroup"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Accept", "application/getPrivilegeAppGroup.v1+json")
$headers.Add("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomains/dcapi/appctrl/privilegeAppGroup' -Method GET -Headers $headers

Response Parameters

- HTTP code 200

Response Body - application/json

JSON Object

Hide Sub-Attributes

customerIDstring

Customer identifier

groupIDstring

Unique identifier for the privilege application group

createdBystring

User ID who created the group (-1 for system)

modifiedBystring

User ID who last modified the group (-1 for system)

platformIDinteger

Platform ID (1=Windows, 2=Mac)

appGroupTypeinteger

Type of application group (4=Privilege)

appGroupCategoryinteger

Category of the application group (0=Default)

descriptionstring

Description of the privilege application group

applicationRulesJSON Array

Array of application rules in the privilege group

Show Sub-Attributes

JSON Object

Show Sub-Attributes

appRuleTypeinteger

Rule type ID (1=Vendor, 2=Product, 3=Executable, 4=FileHash)

appRuleNamestring

Display name of the application rule

trustedUpdaterinteger

Trusted updater flag (0=No, 1=Yes)

ruleDetailsJSON Object

Detailed attributes of the rule

Show Sub-Attributes

appRuleIDstring

Unique identifier for the application rule

isExistingboolean

Whether the rule already exists in the repository

isVerifiedinteger

Verification status (1=verified, 0=unverified)

displayNamestring

Display name of the vendor/product

vendorIDstring

Unique identifier of the software vendor

vendorNamestring

Name of the software vendor

restrictChildElevationboolean

Whether child process elevation is restricted for this rule

addedRulesarray

Array of rules pending addition (empty on GET)

removedRulesarray

Array of rules pending removal (empty on GET)

applicationRuleCountinteger

Total count of application rules in the group

associatedCustomGroupCountinteger

Count of custom groups associated with this app group

appGroupNamestring

Name of the privilege application group (e.g. Default_Privilege_Group)

createdTimestring

Creation timestamp in milliseconds since epoch

modifiedTimestring

Last modification timestamp in milliseconds since epoch

jitRequestModeinteger

JIT request mode (0=Disabled, 1=Enabled, 2=Approval Required)

configSpecificAppEnabledboolean

Whether config-specific app elevation is enabled

defaultGroupResourcestring

Default group resource (null if not set)

clearExistingRulesboolean

Whether existing rules should be cleared

manualElevationEnabledboolean

Whether manual elevation is enabled

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

Privilege application group with application rules

Copied!

  {
    "modifiedTime": "1775480399989",
    "manualElevationEnabled": false,
    "appGroupName": "Default_Privilege_Group",
    "configSpecificAppEnabled": true,
    "groupID": "303",
    "defaultGroupResource": null,
    "description": "",
    "platformID": 1,
    "addedRules": [],
    "clearExistingRules": false,
    "removedRules": [],
    "applicationRules": [
      {
        "appRuleType": 1,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "906",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "Epic Games Inc.",
          "vendorID": "310",
          "vendorName": "Epic Games Inc.",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      },
      {
        "appRuleType": 1,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "907",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "Dropbox, Inc",
          "vendorID": "307",
          "vendorName": "Dropbox, Inc",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      },
      {
        "appRuleType": 1,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "908",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "ZOHO Corporation Private Limited",
          "vendorID": "315",
          "vendorName": "ZOHO Corporation Private Limited",
          "restrictChildElevation": true
        },
        "appRuleName": ""
      },
      {
        "appRuleType": 2,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "909",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "vfghjk",
          "productVendorID": "601",
          "vendorID": "601",
          "vendorName": "ertyui",
          "productName": "vfghjk",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      },
      {
        "appRuleType": 2,
        "trustedUpdater": 0,
        "ruleDetails": {
          "appRuleID": "910",
          "isExisting": true,
          "isVerified": 1,
          "displayName": "Brave Browser",
          "productVendorID": "314",
          "vendorID": "314",
          "vendorName": "Brave Software, Inc.",
          "productName": "Brave Browser",
          "restrictChildElevation": false
        },
        "appRuleName": ""
      }
    ],
    "associatedCustomGroupCount": 0,
    "createdBy": "-1",
    "appGroupType": 4,
    "customerID": "1",
    "jitRequestMode": 0,
    "createdTime": "1774006806321",
    "modifiedBy": "-1",
    "appGroupCategory": 0,
    "applicationRuleCount": 5
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.