# Modifies the child process application group by adding or removing rules

Updates the child process application group by adding new parent-process rules or removing existing ones.

## Endpoint

**POST** `/dcapi/appctrl/childProcessGroup`

## Request

### Request URL

`https://{server-hostname}:8383/dcapi/appctrl/childProcessGroup`

### Scope

`AppControl.CREATE`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

- **content-type**: string (Optional)

#### Request Body

`application/json`

- **addedRules**: JSON array (Mandatory)
  - Rules to add — prefetch IDs from [Get Child Process Types](https://www.manageengine.com/products/desktop-central/help/api/onpremise/acp-get-child-process-types.html)
- **removedRules**: JSON array (Mandatory)
  - Rules to remove — prefetch appRuleID from [Get Child Process Group](https://www.manageengine.com/products/desktop-central/help/api/onpremise/acp-get-child-process-group.html)

### Sample Request

```curl
curl --request POST \
  --url https://appdomain/dcapi/appctrl/childProcessGroup \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52' \
  --header 'content-type: SOME_STRING_VALUE' \
  --data '{"removedRules":[{"appRuleType":1,"appRuleIDs":[620]}],"addedRules":[{"appRuleType":2,"verifiedAppRepoIDs":[750]}]}'
```

### Sample Request Body

Update child process group — add product rules and remove existing vendor rules

```json
{
  "removedRules": [
    {
      "appRuleType": 1,
      "appRuleIDs": [
        620
      ]
    }
  ],
  "addedRules": [
    {
      "appRuleType": 2,
      "verifiedAppRepoIDs": [
        750
      ]
    }
  ]
}
```

## Response Parameters

### HTTP Code 200

#### Response Body

`application/json`

- **applicationRules**: JSON array
  - Array of newly added application rules with generated IDs
- **status**: string
  - Operation status (success)

### HTTP Code 401

#### Response Body

`application/json`

- **errorCode**: long
  - Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
- **errorMsg**: string
  - Authentication failure reason

### HTTP Code 500

#### Response Body

`application/json`

- **errorCode**: string
  - Internal error code: INTERNAL_ERROR when exception occurs updating child process group
- **errorMessage**: string
  - Detailed message: Error Occurred while add or update Child process app group

### Possible Response Codes

- **200**: HTTP code
- **401**: HTTP code
- **500**: HTTP code

### Sample Response: HTTP 200

Child process group updated with new rules

```json
{
  "applicationRules": [
    {
      "appRuleType": 2,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "304",
        "isVerified": 1,
        "productVendorID": "358"
      },
      "appRuleName": ""
    }
  ],
  "status": "success"
}
```

### Sample Response: HTTP 401

Authentication credentials missing or invalid

```json
{
  "errorMessage": "Authentication credentials are missing or invalid",
  "errorCode": "UNAUTHORIZED"
}
```

### Sample Response: HTTP 500

Internal error while updating child process group

```json
{
  "errorMessage": "Error Occurred while add or update Child process app group",
  "errorCode": "INTERNAL_ERROR"
}
```

## Rate Limit

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.