Creates a new compliance profile with the specified rules.
post /bsp/api/v1/bmp/compliance/profiles
https://{serverurl}/bsp/api/v1/bmp/compliance/profiles
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
Name of the compliance profile. Maximum 50 characters.
Description of the compliance profile. Maximum 100 characters.
Compliance rule IDs from List All Compliance Rules response (rule_id field) to attach to the profile. Accepts 1 to 50 rule IDs.
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/compliance/profiles \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{}'Create baseline profile with rule IDs from List All Compliance Rules response (rule_id field)
{
"profile_name": "Chrome Security Baseline",
"rule_ids": [
351,
357,
362,
367
],
"profile_description": "Baseline compliance for Chrome browsers"
}
Collection status of the profile. 1 indicates active
Profile type code. 64500=Custom
User ID of the last modifier
Description of the compliance profile
User ID of the profile creator
Collection ID associated with this profile version
Name of the compliance profile
Compliance rule IDs from List All Compliance Rules response (rule_id field) attached to this profile
ID of the user who performed the operation
Unique identifier of the compliance profile
Scope of the profile. 0 indicates organization-wide
Customer ID associated with this profile
Internal compliance ID associated with this profile
Security type indicator. -1 indicates default
Error code indicating a required parameter is missing or invalid
Message specifying which parameter failed validation
Request URL that triggered the error
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Message describing the server-side failure
Internal server error code
Profile created
{
"profile_collection_status": "1",
"profile_type": "64500",
"last_modified_by": "1",
"profile_description": "Baseline compliance for Chrome browsers",
"created_by": "1",
"collection_id": "222",
"profile_name": "Chrome Security Baseline",
"rule_ids": [
351,
357,
362,
367
],
"user_id": "1",
"profile_id": "111",
"scope": "0",
"customer_id": "1",
"compliance_id": "301",
"security_type": "-1"
}
Invalid request body
{
"errorCode": "IAM0021",
"url": "/bsp/api/v1/bmp/compliance/profiles",
"errorMsg": "The number of times the parameter profile_name used is below the minimum requirement."
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.