Clones a published configuration profile with all its payloads.
post /bsp/api/v1/bmp/profiles/{profile_id}/clone
https://{serverurl}/bsp/api/v1/bmp/profiles/{profile_id}/clone
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
Retrieve the configuration profile ID from the profileid key in the response returned by List Configuration Profiles
Optional. true=clone as new profile; false/omitted=clone as new draft version. Default: false
curl --request POST \
--url https://appdomains/bsp/api/v1/bmp/profiles/{profile_id}/clone \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52'Full configuration profile details including metadata, version info, and associated payloads
Profile ID
Display name
Description
Profile type code. 64100=Browser Customization, 64005=File Activity, 64011=Browser Router, 64050=Web Isolation, 64200=Threat Prevention, 64201=Data Leakage Prevention, 64210=Browser Lockdown, 64500=Compliance, 64510=Default Extension, 64950=URL Filter, 64960=Managed Browser
'0'=Device, '1'=User
In trash
Collection reference ID
'1'=Windows, '2'=Mac, '-1'=All platforms (Windows + Mac)
Latest version (increments on modify)
Latest published version, or '--' if never published
Associated payload configurations
Individual payload configuration item returned in profile responses
Internal config name (config_label in Add/Modify responses)
Payload type code. 64200=Threat, 64201=DLP, 64151=Web Isolation, 64210=Browser Lockdown, 64950=URL Filter, 64960=Managed Browser, 64025=Add-on, 64011=Browser Router, 64012=Java Rules, 64800=Content Restriction, 64801=Upload Restriction
Payload instance ID
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Conflict error due to the current state of the profile
Conflict error message
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Internal server error response for profile operations
Error message describing the server failure
Error code for internal server errors
Cloned File Activity Restriction profile (64005)
{
"collection_id": "222",
"profile_name": "FileActivityFilter 3",
"profile_type": "64005",
"platform_type": "-1",
"latest_version": "2",
"is_moved_to_trash": false,
"payloads": [
{
"config_name": "CONTENT_RESTRICTION_PAYLOAD",
"payload_type": "64800",
"payload_id": "332",
"custom_mail_id": "--",
"custom_message": "--",
"exclude_rules_json": {
"sites": [],
"site_groups": []
},
"all_condition_match": true,
"rules_json": {
"rule_01": {
"rule_type": 2,
"rule_value": [
"5"
],
"enable": "0",
"range": 1,
"greater": 0
},
"rule_execution_order": "(rule_01)"
},
"message_type": "0",
"whitelisted": "0",
"custom_logo_path": "--"
}
],
"profile_id": "111",
"scope": "0",
"latest_published_version": "1",
"profile_description": ""
}
Cloned URL Filter profile (64950)
{
"collection_id": "222",
"profile_name": "Updated Policy Name",
"profile_type": "64950",
"platform_type": "-1",
"latest_version": "3",
"is_moved_to_trash": false,
"payloads": [
{
"ssl_cert_protection": "-1",
"config_name": "URL_FILTER_PAYLOAD",
"payload_type": "64950",
"payload_id": "928",
"block_malicious_site": "-1",
"rules_json": {
"rule_2": {
"enable": "1",
"rule_value": [
"00:00:00",
"23:59:59"
],
"range": "1",
"type": "1",
"greater": "0"
},
"rule_1": {
"enable": "0",
"rule_value": {
"categories": [
{
"name": "News",
"id": "1"
}
]
},
"range": "1",
"type": "2",
"greater": "0"
},
"rule_execution_order": "(rule_1 & rule_2)"
},
"restrict_cert_override_error": "-1",
"custom_mail_id": "--",
"custom_message": "Access to this website [domain] [category] is currently blocked in your organization. Contact your system administrator for further information",
"block_websites_with_ads": "-1",
"whitelisted": "0",
"webcategory_override_allowed": "0",
"block_other_sites_to_injectcode": "-1",
"custom_logo_path": "603",
"custom_url": "--"
}
],
"profile_id": "111",
"scope": "0",
"latest_published_version": "2",
"profile_description": ""
}
Cloned Web Isolation profile (64050)
{
"collection_id": "222",
"profile_name": "Isolation Policy Copy",
"profile_type": "64050",
"platform_type": "1",
"latest_version": "1",
"is_moved_to_trash": false,
"payloads": [
{
"payload_type": "64151",
"payload_id": "532",
"proxy_range": "10.0.0.0/8",
"defender_app_gaurd_id": "200",
"sites": [
{
"name": "www.google.com",
"id": "304",
"type": "webdomain"
}
],
"allow_session_persistence": "1",
"prevent_non_ent_in_ent": "0",
"config_label": "WEB_ISOLATION"
}
],
"profile_id": "111",
"scope": "0",
"latest_published_version": "--",
"profile_description": "Cloned from Isolation Policy"
}
API key is missing or invalid
{
"errorCode": "IAM0001",
"errorMsg": "Authentication key is invalid. Please regenerate the key and try again."
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "User does not have permission to perform this operation"
}
Source profile to clone does not exist
{
"errormsg": "Profile not found"
}
Only published profiles can be cloned
{
"errormsg": "Cannot clone unpublished profile."
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "Too many requests. Please try again after 5 minutes"
}
Server error
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.