Initiates an on-demand CIS compliance scan for all resources in the specified custom group. Subject to a cooling period between consecutive scan operations
post /dcapi/scap/compliance/initiateComplianceScan
https://{serverurl}/dcapi/scap/compliance/initiateComplianceScan
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
The resource ID of the custom group to scan
curl --request POST \
--url https://appdomains/dcapi/scap/compliance/initiateComplianceScan \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52'Scan initiation status. inProgress on success, failed on failure
Human-readable status message
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Precondition failed error code. Scan is still in cooling period from a previous scan
Message indicating the remaining cooling period minutes before next scan is allowed
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Compliance scan initiated successfully
{
"message": "Scan initiated successfully",
"status": "inProgress"
}
Scan initiation failed due to authorization
{
"message": "Not Authorised",
"status": "failed"
}
Scan initiation failed
{
"message": "Scan initiation failed",
"status": "failed"
}
Authentication credentials are missing or invalid
{
"errorMessage": "Authentication required",
"errorCode": "UNAUTHORIZED"
}
Scan is in cooling period from previous scan
{
"errorMessage": "All managed system(s) are currently being scanned. Retry scanning system(s) after 5 minute(s).",
"errorCode": "COMPLIANCE_SCAN_ALL_FROZEN"
}
API call threshold exceeded
{
"errorMessage": "Rate limit exceeded. Retry after some time",
"errorCode": "TOO_MANY_REQUESTS"
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.