# Returns the list of local admin accounts excluded from admin-rights removal

Returns the discovery and remediation exclusion configuration, including every local admin account that is protected from the Remove Admin Rights operation.

## Endpoints

`GET /dcapi/appctrl/discovery/exclusionconf`

## Request URL

`https://{server-hostname}:8383/dcapi/appctrl/discovery/exclusionconf`

### Scope

`AppControl.READ`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

### Sample Request

```curl
curl --request GET \
  --url https://appdomain/dcapi/appctrl/discovery/exclusionconf \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP code 200

Response Body — `application/json`

**JSON object**

- **discId** (`string`): Discovery configuration ID
- **customerId** (`string`): Customer identifier
- **createdBy** (`string`): User ID who created the configuration
- **modifiedBy** (`string`): User ID who last modified the configuration
- **lastModifiedOn** (`string`): Last modification timestamp in milliseconds since epoch
- **type** (`integer`): Type of discovery and remediation configuration (1=Automatic, 2=Manual)
- **customGroupIds** (`array`): Array of custom group IDs associated with the configuration (empty if none)
- **localAdminUsers** (`JSON array`): Array of local admin users excluded from admin rights removal

### HTTP code 500

Response Body — `application/json`

**JSON object**

- **errorCode** (`string`): Internal error code: INTERNAL_ERROR when exception occurs fetching exclusion data
- **errorMessage** (`string`): Detailed message: Unable to fetch discovery and remediation data

## Possible Response Codes

- **200**: HTTP code
- **500**: HTTP code

## Sample Response: HTTP 200

Discovery exclusion configuration with excluded admin accounts

```json
{
  "discId": "1",
  "customGroupIds": [],
  "createdBy": "6301",
  "customerId": "1",
  "modifiedBy": "6301",
  "type": 2,
  "localAdminUsers": [
    {
      "buildInAdminUser": false,
      "resourceId": null,
      "domain": null,
      "resourceCount": null,
      "fullName": null,
      "userName": "sysadmin",
      "userId": null,
      "sId": null
    },
    {
      "buildInAdminUser": false,
      "resourceId": null,
      "domain": null,
      "resourceCount": null,
      "fullName": null,
      "userName": "emsadmin",
      "userId": null,
      "sId": null
    },
    {
      "buildInAdminUser": true,
      "resourceId": null,
      "domain": null,
      "resourceCount": null,
      "fullName": null,
      "userName": "Administrator",
      "userId": null,
      "sId": null
    }
  ],
  "lastModifiedOn": "1737657797133"
}
```

## Sample Response: HTTP 500

Internal error while fetching exclusion configuration

```json
{
  "errorMessage": "Unable to fetch discovery and remediation data",
  "errorCode": "INTERNAL_ERROR"
}
```

## Rate Limit

**Duration:** 1 minute | **Threshold:** 60 | **Lock period:** 5 minutes

Duration — Time window for the threshold.  
Threshold — Number of API calls allowed within the specified duration.  
Lock Period — Wait time before consecutive API requests.