# Fetch quarantine policy configuration for a custom group

Retrieves the complete quarantine policy configuration including rules, restrictions, warning and grace period settings, and notification preferences for the specified custom group.

## Endpoint

`GET /dcapi/compliance/quarantine/policy/{grpResourceId}`

## Request URL

`https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/dcapi/compliance/quarantine/policy/{grpResourceId}`

### Scope

`DesktopCentralCloud.VulnerabilityMgmt.READ`

### Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Path Parameters

| Parameter | Type | Required | Description |
|---|---|---|---|
| grpResourceId | string | Mandatory | The resource ID of the quarantine custom group to delete. Fetch from [Get Quarantine Rule Details](https://www.manageengine.com/products/desktop-central/help/api/cloud/get-quarantine-rule-details.html). |

#### Query Parameters

| Parameter | Type | Required | Description |
|---|---|---|---|
| excludeTargets | boolean | Optional | If true, returns only rules and restrictions without target group details. |

### Sample Request

```curl
curl --request GET \
  --url https://appdomains/dcapi/compliance/quarantine/policy/{grpResourceId} \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| customGroup | long | Custom group resource ID |
| collectionId | long | Associated quarantine collection ID |
| cgName | string | Custom group name |
| status | string | Collection deployment status |
| quarantineRules | array | List of configured quarantine rules including patch severity, software, service, vulnerability, registry, and file checks |
| quarantineRestrictions | JSON Object | Action type and network restriction configuration for quarantine enforcement |
| enableWarnUser | boolean | Whether user warning dialog is enabled |
| warningTitle | string | Warning dialog title text |
| warningDesc | string | Warning dialog description text |
| enableGracePeriod | boolean | Whether grace period is configured before enforcement |
| graceTitle | string | Grace period notification title |
| graceDesc | string | Grace period notification description |
| gracePeriod | string | Grace period duration in days |
| graceNotificationTime | string | Time for grace notification in HH:mm format |
| ENABLE_EMAIL_NOTIFY | boolean | Whether email notifications are enabled |
| EMAIL_DURATION | string | Email notification duration |
| EMAIL_ENABLED_DAYS | string | Comma-separated days when email notifications are active |
| EMAIL | string | Notification email address |
| ENABLE_MOBILE_NOTIFY_FOR_USERS | array | List of users enabled for mobile notifications |

### HTTP Code 401

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| errorCode | long | Unauthorized error code: credentials missing, expired, or invalid |
| errorMsg | string | Authentication failure reason |

### HTTP Code 403

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| errorCode | long | Error code indicating insufficient permissions |
| errorMsg | string | Message indicating insufficient privileges to access this resource |

### HTTP Code 429

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| errorCode | long | Rate limit error code returned when the API call reached threshold |
| errorMsg | string | Rate limit exceeded message with retry guidance |

### Possible Response Codes

| Code | Type |
|---|---|
| 200 | HTTP code |
| 401 | HTTP code |
| 403 | HTTP code |
| 429 | HTTP code |

### Sample Response: HTTP 200

Full quarantine policy configuration with target group details:

```json
{
  "quarantineRestrictions": {
    "quarantineAction": "2",
    "blockAction": "2",
    "allowRestrictAccess": [
      {
        "condition": "domain",
        "value": "*.company.com"
      }
    ]
  },
  "warningDesc": "Your system will be quarantined.",
  "gracePeriod": "7",
  "graceDesc": "Resolve issues within the grace period.",
  "quarantineRules": [
    {
      "condition": "osPatch",
      "interval": "30",
      "severities": [
        "critical",
        "important"
      ]
    },
    {
      "condition": "software",
      "softwareName": "TeamViewer",
      "status": "installed"
    },
    {
      "condition": "vulnerability",
      "operation": "cvss",
      "value": "7.0"
    }
  ],
  "warningTitle": "Non-Compliant System",
  "EMAIL_DURATION": "1",
  "graceTitle": "Grace Period",
  "EMAIL": "security@company.com",
  "ENABLE_MOBILE_NOTIFY_FOR_USERS": [
    "admin1"
  ],
  "enableGracePeriod": true,
  "cgName": "DMZ Servers",
  "enableWarnUser": true,
  "ENABLE_EMAIL_NOTIFY": true,
  "customGroup": 301,
  "EMAIL_ENABLED_DAYS": "1,2,3,4,5",
  "graceNotificationTime": "10:00",
  "collectionId": 6001,
  "status": "Deployed"
}
```

Quarantine rules and restrictions only (`excludeTargets=true`):

```json
{
  "quarantineRestrictions": {
    "quarantineAction": "1"
  },
  "quarantineRules": [
    {
      "condition": "osPatch",
      "interval": "30",
      "severities": [
        "critical"
      ]
    }
  ],
  "ENABLE_EMAIL_NOTIFY": false,
  "EMAIL_DURATION": "",
  "EMAIL_ENABLED_DAYS": "",
  "EMAIL": "",
  "ENABLE_MOBILE_NOTIFY_FOR_USERS": [],
  "status": "Deployed"
}
```

### Sample Response: HTTP 401

User lacks scope access to the custom group:

```json
{
  "errorMessage": "User Not Authorized",
  "errorCode": "UAC_UNAUTHORIZED"
}
```

### Sample Response: HTTP 403

Quarantine is not available in VMP Professional Edition:

```json
{
  "errorMessage": "You do not have enough permission to perform this action. Upgrade to Enterprise Edition to use these features.",
  "errorCode": "FORBIDDEN"
}
```

### Sample Response: HTTP 429

API call threshold exceeded:

```json
{
  "errorMessage": "Rate limit exceeded. Retry after some time",
  "errorCode": "TOO_MANY_REQUESTS"
}
```

## Rate Limit

![ ](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.