# Returns the privilege elevation application group and its rules

Returns the privilege application group containing applications configured for privilege elevation, including each rule's `appRuleID`.

## Endpoint

`GET /dcapi/appctrl/privilegeAppGroup`

## Request

### Request URL

https://[*{serverurl}*](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/dcapi/appctrl/privilegeAppGroup

### Scope

`DesktopCentralCloud.AppControl.READ`

### Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

- **Accept** `string` — **Mandatory**
  - `application/getPrivilegeAppGroup.v1+json`

### Sample Request

```curl
curl --request GET \
  --url https://appdomains/dcapi/appctrl/privilegeAppGroup \
  --header 'Accept: application/getPrivilegeAppGroup.v1+json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response

### Response Parameters

#### HTTP code 200

Response Body — `application/json`

`JSON Object`

- **customerID** `string`
  - Customer identifier
- **groupID** `string`
  - Unique identifier for the privilege application group
- **createdBy** `string`
  - User ID who created the group (-1 for system)
- **modifiedBy** `string`
  - User ID who last modified the group (-1 for system)
- **platformID** `integer`
  - Platform ID (1=Windows, 2=Mac)
- **appGroupType** `integer`
  - Type of application group (4=Privilege)
- **appGroupCategory** `integer`
  - Category of the application group (0=Default)
- **description** `string`
  - Description of the privilege application group
- **applicationRules** `JSON Array`
  - Array of application rules in the privilege group
- **addedRules** `array`
  - Array of rules pending addition (empty on GET)
- **removedRules** `array`
  - Array of rules pending removal (empty on GET)
- **applicationRuleCount** `integer`
  - Total count of application rules in the group
- **associatedCustomGroupCount** `integer`
  - Count of custom groups associated with this app group
- **appGroupName** `string`
  - Name of the privilege application group (e.g. Default_Privilege_Group)
- **createdTime** `string`
  - Creation timestamp in milliseconds since epoch
- **modifiedTime** `string`
  - Last modification timestamp in milliseconds since epoch
- **jitRequestMode** `integer`
  - JIT request mode (0=Disabled, 1=Enabled, 2=Approval Required)
- **configSpecificAppEnabled** `boolean`
  - Whether config-specific app elevation is enabled
- **defaultGroupResource** `string`
  - Default group resource (null if not set)
- **clearExistingRules** `boolean`
  - Whether existing rules should be cleared
- **manualElevationEnabled** `boolean`
  - Whether manual elevation is enabled

### Possible Response Codes

- **200** — HTTP code

### Sample Response: HTTP 200

Privilege application group with application rules

```json
{
  "modifiedTime": "1775480399989",
  "manualElevationEnabled": false,
  "appGroupName": "Default_Privilege_Group",
  "configSpecificAppEnabled": true,
  "groupID": "303",
  "defaultGroupResource": null,
  "description": "",
  "platformID": 1,
  "addedRules": [],
  "clearExistingRules": false,
  "removedRules": [],
  "applicationRules": [
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "906",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Epic Games Inc.",
        "vendorID": "310",
        "vendorName": "Epic Games Inc.",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "907",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Dropbox, Inc",
        "vendorID": "307",
        "vendorName": "Dropbox, Inc",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "908",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "ZOHO Corporation Private Limited",
        "vendorID": "315",
        "vendorName": "ZOHO Corporation Private Limited",
        "restrictChildElevation": true
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 2,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "909",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "vfghjk",
        "productVendorID": "601",
        "vendorID": "601",
        "vendorName": "ertyui",
        "productName": "vfghjk",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 2,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "910",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Brave Browser",
        "productVendorID": "314",
        "vendorID": "314",
        "vendorName": "Brave Software, Inc.",
        "productName": "Brave Browser",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    }
  ],
  "associatedCustomGroupCount": 0,
  "createdBy": "-1",
  "appGroupType": 4,
  "customerID": "1",
  "jitRequestMode": 0,
  "createdTime": "1774006806321",
  "modifiedBy": "-1",
  "appGroupCategory": 0,
  "applicationRuleCount": 5
}
```

## Rate Limit

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.