# Returns the privilege elevation application group and its rules

Returns the privilege application group containing applications configured for privilege elevation, including each rule's appRuleID.

## Endpoints

GET `/dcapi/appctrl/privilegeAppGroup`

## Request URL

`https://{server-hostname}:8383/dcapi/appctrl/privilegeAppGroup`

## Scope

`AppControl.READ`

## Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

## Sample Request

### Curl

```curl
curl --request GET \
  --url https://appdomain/dcapi/appctrl/privilegeAppGroup \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP code 200

Response Body - `application/json`

- JSON object
  - **customerID** `string`: Customer identifier
  - **groupID** `string`: Unique identifier for the privilege application group
  - **createdBy** `string`: User ID who created the group (-1 for system)
  - **modifiedBy** `string`: User ID who last modified the group (-1 for system)
  - **platformID** `integer`: Platform ID (1=Windows, 2=Mac)
  - **appGroupType** `integer`: Type of application group (4=Privilege)
  - **appGroupCategory** `integer`: Category of the application group (0=Default)
  - **description** `string`: Description of the privilege application group
  - **applicationRules** `JSON array`: Array of application rules in the privilege group
  - **addedRules** `array`: Array of rules pending addition (empty on GET)
  - **removedRules** `array`: Array of rules pending removal (empty on GET)
  - **applicationRuleCount** `integer`: Total count of application rules in the group
  - **associatedCustomGroupCount** `integer`: Count of custom groups associated with this app group
  - **appGroupName** `string`: Name of the privilege application group (e.g. Default_Privilege_Group)
  - **createdTime** `string`: Creation timestamp in milliseconds since epoch
  - **modifiedTime** `string`: Last modification timestamp in milliseconds since epoch
  - **jitRequestMode** `integer`: JIT request mode (0=Disabled, 1=Enabled, 2=Approval Required)
  - **configSpecificAppEnabled** `boolean`: Whether config-specific app elevation is enabled
  - **defaultGroupResource** `string`: Default group resource (null if not set)
  - **clearExistingRules** `boolean`: Whether existing rules should be cleared
  - **manualElevationEnabled** `boolean`: Whether manual elevation is enabled

## Possible Response Codes

- **200** HTTP code

## Sample Response: HTTP 200

Privilege application group with application rules

```json
{
  "modifiedTime": "1775480399989",
  "manualElevationEnabled": false,
  "appGroupName": "Default_Privilege_Group",
  "configSpecificAppEnabled": true,
  "groupID": "303",
  "defaultGroupResource": null,
  "description": "",
  "platformID": 1,
  "addedRules": [],
  "clearExistingRules": false,
  "removedRules": [],
  "applicationRules": [
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "906",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Epic Games Inc.",
        "vendorID": "310",
        "vendorName": "Epic Games Inc.",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "907",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Dropbox, Inc",
        "vendorID": "307",
        "vendorName": "Dropbox, Inc",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "908",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "ZOHO Corporation Private Limited",
        "vendorID": "315",
        "vendorName": "ZOHO Corporation Private Limited",
        "restrictChildElevation": true
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 2,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "909",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "vfghjk",
        "productVendorID": "601",
        "vendorID": "601",
        "vendorName": "ertyui",
        "productName": "vfghjk",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 2,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "910",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Brave Browser",
        "productVendorID": "314",
        "vendorID": "314",
        "vendorName": "Brave Software, Inc.",
        "productName": "Brave Browser",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    }
  ],
  "associatedCustomGroupCount": 0,
  "createdBy": "-1",
  "appGroupType": 4,
  "customerID": "1",
  "jitRequestMode": 0,
  "createdTime": "1774006806321",
  "modifiedBy": "-1",
  "appGroupCategory": 0,
  "applicationRuleCount": 5
}
```

![ ](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.