# Get a browser's compliance details against a specific profile

Retrieves the per-rule compliance status of a browser on a device against the specified compliance profile.

## Endpoint

`GET /bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}`

## Request

### Request URL

`https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}`

### Scope

`DesktopCentralCloud.BrowserManager.READ`

### Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

| Parameter | Type | Required | Value |
|---|---|---|---|
| Accept | string | Mandatory | application/json |

#### Path Parameters

| Parameter | Type | Required | Description |
|---|---|---|---|
| browser_id | string | Mandatory | Browser ID from [List Browsers](https://www.manageengine.com/products/desktop-central/help/api/cloud/inventory-list-browsers.html) response (`browser_type` field) |
| device_id | string | Mandatory | Device resource ID from [List Devices](https://www.manageengine.com/products/desktop-central/help/api/cloud/inventory-list-devices.html) response (`device_id` field) |
| compliance_id | string | Mandatory | Compliance profile ID from [List Compliance Profiles](https://www.manageengine.com/products/desktop-central/help/api/cloud/compliance-list-compliance-profiles.html) response (`profileid` field) |

### Sample Request

#### Curl

```curl
curl --request GET \
  --url https://appdomains/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id} \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

#### Java

```java
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomains/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}"))
        .header("Accept", "application/json")
        .header("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse<string> response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());

  }
}
```

#### Python

```python
import http.client

conn = http.client.HTTPSConnection("appdomains")

headers = {
    'Accept': "application/json",
    'Authorization': "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52"
    }

conn.request("GET", "/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))
```

#### Deluge

```javascript
headersMap = Map();
headersMap.put("Accept", "application/json");

response = invokeUrl
[
    url: "https://appDomains/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}"
    type: GET
    headers: headersMap
    connection: connection_name
]

info response;
```

#### PowerShell

```powershell
$headers=@{}
$headers.Add("Accept", "application/json")
$headers.Add("Authorization", "Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomains/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}' -Method GET -Headers $headers
```

## Response Parameters

### HTTP Code 200

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| Response body | JSON Object | Raw JSONArray of compliance details |
| device_id | string | Device resource ID |
| compliance_details | JSON Array | Compliance profile details |

### HTTP Code 401

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| Response body | JSON Object |  |
| errorCode | long | Unauthorized error code: credentials missing, expired, or invalid |
| errorMsg | string | Authentication failure reason |

### HTTP Code 403

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| Response body | JSON Object | RBCA scope violation when device is not in the user's managed scope |
| errorCode | string | Error code indicating the device is outside the user's managed scope |
| errorMsg | string | Message indicating the device is not accessible to the current user |
| url | string | Request URL that triggered the error |

### HTTP Code 429

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| Response body | JSON Object |  |
| errorCode | long | Rate limit error code returned when the API call reached threshold |
| errorMsg | string | Rate limit exceeded message with retry guidance |

### HTTP Code 500

Response body: `application/json`

| Parameter | Type | Description |
|---|---|---|
| Response body | JSON Object | Internal server error during device operations |
| error_description | string | Message describing the server-side failure |
| error_code | string | Internal server error code |

## Possible Response Codes

- `200` — HTTP code
- `401` — HTTP code
- `403` — HTTP code
- `429` — HTTP code
- `500` — HTTP code

## Sample Responses

### HTTP 200

#### Compliance against the default profile

```json
[
  {
    "compliance_details": [
      {
        "category_details": [
          {
            "rule_id": "1",
            "non_compliant_rules": [
              6,
              42,
              43,
              12,
              44,
              45,
              14,
              46,
              47,
              48,
              17,
              50,
              51,
              52
            ],
            "rule_name": "Data Leakage Prevention",
            "security_percentage": "17.647058486938477",
            "yet_to_scan": [],
            "compliant_rules": [
              18
            ]
          },
          {
            "rule_id": "2",
            "non_compliant_rules": [
              16,
              68,
              5
            ],
            "rule_name": "Threat Prevention",
            "security_percentage": "52.94117736816406",
            "yet_to_scan": [],
            "compliant_rules": [
              10
            ]
          }
        ],
        "security_percentage": "29.411766052246094",
        "compliance_id": "1",
        "rule_status": [
          {
            "rule_id": "51",
            "rule_name": "background_mode_chrome",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "10",
            "rule_name": "critical_permissions",
            "compliant_status": "1",
            "criticality": "3"
          },
          {
            "rule_id": "16",
            "rule_name": "download_restriction",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "5",
            "rule_name": "phishing_filter",
            "compliant_status": "0",
            "criticality": "3"
          },
          {
            "rule_id": "18",
            "rule_name": "sideload_extensions",
            "compliant_status": "1",
            "criticality": "2"
          },
          {
            "rule_id": "14",
            "rule_name": "third_party_cookie_restriction_chrome",
            "compliant_status": "0",
            "criticality": "1"
          }
        ]
      }
    ],
    "device_id": "888"
  }
]
```

#### Compliance against a specific profile

```json
[
  {
    "compliance_details": [
      {
        "category_details": [
          {
            "rule_id": "1",
            "non_compliant_rules": [
              328,
              12,
              205,
              333,
              14,
              17,
              339,
              215,
              472,
              345,
              220,
              285,
              351,
              162,
              290,
              482,
              357,
              296,
              362,
              367,
              431,
              306,
              51,
              249,
              313,
              377
            ],
            "rule_name": "Data Leakage Prevention",
            "security_percentage": "3.7735848426818848",
            "yet_to_scan": [],
            "compliant_rules": [
              447
            ]
          },
          {
            "rule_id": "2",
            "non_compliant_rules": [
              195,
              259,
              323,
              200,
              264,
              396,
              269,
              210,
              275,
              152,
              280,
              157,
              224,
              416,
              229,
              421,
              167,
              234,
              426,
              171,
              301,
              175,
              239,
              369,
              372,
              180,
              244,
              185,
              190,
              254,
              318
            ],
            "rule_name": "Threat Prevention",
            "security_percentage": "16.438356399536133",
            "yet_to_scan": [],
            "compliant_rules": [
              467,
              437,
              457,
              442,
              462,
              478
            ]
          }
        ],
        "security_percentage": "11.111111640930176",
        "compliance_id": "3",
        "rule_status": [
          {
            "rule_id": "152",
            "rule_name": "allow_cross_origin_auth_prompt",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "467",
            "rule_name": "cert_transparency_enforce_disabled_urls",
            "compliant_status": "1",
            "criticality": "2"
          },
          {
            "rule_id": "396",
            "rule_name": "disable_safe_browsing_proceed_anyway",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "351",
            "rule_name": "dns_over_https_mode",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "437",
            "rule_name": "hsts_policy_bypass_list",
            "compliant_status": "1",
            "criticality": "2"
          },
          {
            "rule_id": "447",
            "rule_name": "web_rtc_local_ips_allowed_urls",
            "compliant_status": "1",
            "criticality": "2"
          }
        ]
      }
    ],
    "device_id": "777"
  }
]
```

### HTTP 401

#### Unauthorized

```json
{
  "errorCode": "UNAUTHORIZED",
  "errorMsg": "You are not authorized to perform this action"
}
```

### HTTP 403

#### Device not in scope

```json
{
  "errorCode": "FORBIDDEN",
  "url": "/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}",
  "errorMsg": "The requested device is not in your managed scope"
}
```

### HTTP 429

#### Rate limit exceeded

```json
{
  "errorCode": "RATE_LIMIT_EXCEEDED",
  "errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
```

### HTTP 500

#### Server error

```json
{
  "error_description": "Internal Server error, Please try again in a moment.",
  "error_code": "COM0004"
}
```

## Rate Limits

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 60 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.