Creates a Draft copy of a published Java Rules Manager profile with all its payload rules.
post /bsp/api/v1/bmp/jrm/{jrm_profile_id}/clone
https://{serverurl}/bsp/api/v1/bmp/jrm/{jrm_profile_id}/clone
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
JRM Profile ID from List JRM Profiles response (jrm_profile_id field)
Optional. true=clone as new profile; false/omitted=clone as new draft version. Default: false
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/jrm/{jrm_profile_id}/clone \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52'Full JRM profile with all payload rule details
Unique profile ID use as {jrm_profile_id} in other APIs
Name of this JRM profile
Description of what this profile is for
Always '64012' identifies this as a Java Rules Manager profile
Target platform: '1' = Windows, '2' = Mac, '-1' = All platforms
Current version number of the profile
Published version number, or '--' if never published
Internal collection ID grouping profile versions
Whether this profile is in the trash
Profile scope '0' means default scope
All payload configurations with their URL/group rules, block messages, and Java version settings
Complete payload configuration with all Java rules
Configuration label (always 'JAVA_RULES_MANAGER')
Always '64101' identifies this as a Java Rules Manager payload
Custom message displayed to users when Java is blocked (action=0). Empty string if action is not Block or no custom message is set
List of rule sets each contains URL-based rules and/or group-based rules. The 'config_data_item_id' in each item is used as {jrm_payload_id} for Modify/Delete Payload APIs
Individual rule set with URL and group rules
Unique ID for this rule set use as {jrm_payload_id} in Modify Payload (PUT) API
URL-based rules each entry controls Java behavior for a specific website
Java rule for a specific website URL
Webdomain ID (references a site configured in Browser Security > Web Domain Management)
The website URL/domain name (read-only, set when the webdomain was created)
What to do with Java on this site: '0' = Block Java entirely, '1' = Allow Java to run, '2' = Use browser's default Java setting
When action is '1' (Allow), specifies the required Java version (e.g., '1.7.0_04'). Leave empty to allow any installed version
Group-based rules each entry controls Java behavior for a group of websites
Java rule for a webdomain group
Webdomain group ID (references a group configured in Browser Security > Web Domain Management)
Name of the webdomain group (read-only, set when the group was created)
What to do with Java for all sites in this group: '0' = Block Java, '1' = Allow Java, '2' = Use browser default
When action is '1' (Allow), specifies the required Java version. Leave empty to allow any installed version
Whether default Rich Internet Application (RIA) settings are applied
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Message indicating the requested resource was not found
Message explaining the conflict (e.g., 'Cannot clone unpublished profile.')
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Description of the server-side error
Cloned profile
{
"collection_id": "222",
"profile_name": "Corporate Java Rules (Clone)",
"profile_type": "64012",
"platform_type": "1",
"latest_version": "1",
"is_moved_to_trash": false,
"payloads": [
{
"config_name": "JAVA_RULES_MANAGER",
"payload_type": "64101",
"block_message": "Java applet blocked by policy",
"jrm_details": [
{
"config_data_item_id": "1060",
"urls": [
{
"java_version": "1.7.0_04",
"action": "1",
"id": "3",
"url": "localhost"
}
],
"groups": []
}
],
"default_rias": false
}
],
"profile_id": "111",
"scope": "0",
"latest_published_version": "--",
"profile_description": "Java applet rules for corporate sites"
}
Unauthorized
{
"errorCode": "IAM0001",
"errorMsg": "Authentication key is invalid. Please regenerate the key and try again."
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Profile not found
{
"errormsg": "Profile not found"
}
Cannot clone unpublished
{
"errormsg": "Cannot clone unpublished profile."
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"errormsg": "Internal Server error, Please try again in a moment."
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.