Lists all Just-In-Time (JIT) policies with associated metadata

Returns a list of all JIT policies configured in the system, including each policy's ID, name, description, associated application group, and other relevant metadata. Use this API to retrieve JIT policy information for display in management consoles or for use in automation scripts.

Endpoints

get /dcapi/appctrl/jitpolicies

Copy full URL

Request URL

https://{server-hostname}:8383/dcapi/appctrl/jitpolicies

Scope

AppControl.READCopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomain/dcapi/appctrl/jitpolicies \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/dcapi/appctrl/jitpolicies"))
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

headers = { 'Authorization': " d92d4xxxxxxxxxxxxx15f52" }

conn.request("GET", "/dcapi/appctrl/jitpolicies", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomain/dcapi/appctrl/jitpolicies"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/dcapi/appctrl/jitpolicies' -Method GET -Headers $headers

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON object

Hide Sub-Attributes

pagestring

Current page number of the paginated result

totalPagesinteger

Total number of pages available

temporaryAccessDetailsJSON array

List of temporary access (JIT) policies

Show Sub-Attributes

JSON object

Show Sub-Attributes

policyIDstring

Unique identifier for the temporary access policy

policyNamestring

Display name of the temporary access policy

platforminteger

Platform (Windows, Mac)

policyTypestring

Type of policy (e.g., ACPJitElevate for privilege elevation, ACPJitAllow for allowing blocked apps)

createdTimelong

Creation timestamp in milliseconds since epoch

modifiedTimelong

Last modification timestamp in milliseconds since epoch

createdUserstring

Username of the user who created the policy

modifiedUserstring

Username of the user who last modified the policy

durationTypeinteger

How the duration is specified (1=Fixed minutes, 2=Date range)

durationMinutesstring

Access window length in minutes (applicable when durationType=1)

durationFromlong

Start time in timestamp (null when durationType=1)

durationTolong

End time in timestamp (null when durationType=1)

agentStatusstring

Deployment status of the policy on the agent (e.g., Succeeded, Yet to deploy, Failed)

expiryTimelong

Policy expiry timestamp in milliseconds since epoch

machineNamestring

Name of the target computer where the policy is applied

riskScoredouble

Risk score associated with the target machine

reasonstring

Reason provided by the agent during the JIT elevation request. (Empty if the JIT policy was created by an administrator.)

- HTTP code 401

Response Body - application/json

JSON object

Hide Sub-Attributes

errorCodestring

Error code: INVALID_REQUEST for validation failures

errorMessagestring

Detailed validation error message

- HTTP code 500

Response Body - application/json

JSON object

Hide Sub-Attributes

errorCodestring

Internal error code: INTERNAL_ERROR when exception occurs While getting jit policies

errorMessagestring

Detailed message: Exception Occurred While getting jit policies

Possible Response Codes

200HTTP code

401HTTP code

500HTTP code

Sample Response: HTTP 200

List of JIT policies

Copied!

  {
    "totalPages": 1,
    "page": 1,
    "temporaryAccessDetails": [
      {
        "modifiedTime": "2026-06-22 08:26:50",
        "reason": "Browsing",
        "durationFrom": null,
        "modifiedUser": "admin",
        "policyName": "JIT For Ulaa",
        "durationTo": null,
        "durationType": "Fixed",
        "agentStatus": "Failed",
        "jitAccessType": "Specific Apps",
        "platform": "Windows",
        "machineName": "uexxxxxest",
        "durationMinutes": "60",
        "policyID": "902",
        "policyType": "ACPJitElevate",
        "expiryTime": "2026-06-22 09:26:50",
        "createdTime": "2026-06-17 12:03:28",
        "riskScore": 3.3,
        "createdUser": "DC-SYSTEM-USER"
      },
      {
        "modifiedTime": "2026-06-22 08:26:48",
        "reason": "--",
        "durationFrom": null,
        "modifiedUser": "admin",
        "policyName": "JIT For Google Chrome",
        "durationTo": null,
        "durationType": "Fixed",
        "agentStatus": "Failed",
        "jitAccessType": "Specific Apps",
        "platform": "Windows",
        "machineName": "uexxxxxtest",
        "durationMinutes": "60",
        "policyID": "901",
        "policyType": "ACPJitElevate",
        "expiryTime": "2026-06-22 09:26:48",
        "createdTime": "2026-06-17 12:03:26",
        "riskScore": 3.3,
        "createdUser": "DC-SYSTEM-USER"
      }
    ]
  }

▼ Show full

Sample Response: HTTP 401

Authentication credentials missing or invalid

Copied!

  {
    "errorMessage": "Authentication credentials are missing or invalid",
    "errorCode": "UNAUTHORIZED"
  }

▼ Show full

Sample Response: HTTP 500

Internal error while fetching jit policies

Copied!

  {
    "errorMessage": "Exception Occurred While getting jit policies",
    "errorCode": "INTERNAL_ERROR"
  }

▼ Show full

Duration: 1 minute | Threshold: 50 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.