Modifies the privilege elevation application group by adding or removing rules

Open in ChatGPT Open in ChatGPT to ask questions about this page
Open in Claude Open in Claude to ask questions about this page
Copy as MarkdownCopy this page as markdown to use with AI assistants
View as Markdown Open this page as markdown in a new tab

Updates the privilege application group by adding new rules or removing existing ones. Prefetch vendorID or productVendorID from Get App Rule Types for new rules, and prefetch appRuleID from Get Privilege Application Group for rules to remove.

Request URL

https://{server-hostname}:8383/dcapi/appctrl/privilegeAppGroup

Scope

AppControl.CREATECopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Request Headers

content-typestringOptional

- Request Body

application/json
JSON object
Hide Sub-Attributes
jitRequestModestringMandatory

JIT request mode (0=Disabled, 1=Enabled, 2=Approval Required)

configSpecificAppEnabledbooleanMandatory

Whether config-specific app elevation is enabled

appGroupTypeintegerMandatory

Type of application group (3=Privilege)

addedRulesJSON arrayMandatory

Rules to add

Show Sub-Attributes
JSON object
Show Sub-Attributes
appRuleTypelongMandatory

Rule type (1=Vendor, 2=Product, 3=Executable, 4=FileHash)

verifiedAppRepoIDsarrayOptional

Verified repository IDs (vendorID or productVendorID) — prefetch from Get Child Process Types (Omit this parameter if you are not adding any verified IDs.)

unVerifiedAppRepoIDsarrayOptional

Unverified repository IDs - prefetch from Get Child Process Types (Omit this parameter if you are not adding any unverified IDs.)

removedRulesJSON arrayMandatory

Rules to remove

Show Sub-Attributes
JSON object
Show Sub-Attributes
appRuleTypelongMandatory

Rule type (1=Vendor, 2=Product, 3=Executable, 4=FileHash)

appRuleIDsarrayMandatory

App Rule IDs Prefetch from Get Privileage App Group

Sample Request

Curl
Java
Python
Deluge
PowerShell
Copied!
curl --request POST \
  --url https://appdomain/dcapi/appctrl/privilegeAppGroup \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52' \
  --header 'content-type: SOME_STRING_VALUE' \
  --data '{"removedRules":[{"appRuleType":1,"appRuleIDs":[610]}],"appGroupType":3,"configSpecificAppEnabled":true,"jitRequestMode":"2","addedRules":[{"appRuleType":2,"verifiedAppRepoIDs":[700]}]}'
Show full

Sample Request Body

Update privilege group — add product rules and remove existing vendor rules

Copied!
  {
    "removedRules": [
      {
        "appRuleType": 1,
        "appRuleIDs": [
          610
        ]
      }
    ],
    "appGroupType": 3,
    "configSpecificAppEnabled": true,
    "jitRequestMode": "2",
    "addedRules": [
      {
        "appRuleType": 2,
        "verifiedAppRepoIDs": [
          700
        ]
      }
    ]
  }
                
Show full

Response Parameters

- HTTP code 200

Response Body - application/json
JSON object
Hide Sub-Attributes
statusboolean

Whether the operation completed successfully (true=success, false=failure)

- HTTP code 401

Response Body - application/json
JSON object
Hide Sub-Attributes
errorCodelong

Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)

errorMsgstring

Authentication failure reason

- HTTP code 500

Response Body - application/json
JSON object
Hide Sub-Attributes
errorCodestring

Internal error code: INTERNAL_ERROR when exception occurs updating privilege app group

errorMessagestring

Detailed message: Error Occurred while add or update privilege app group

Possible Response Codes

200HTTP code
401HTTP code
500HTTP code

Sample Response: HTTP 200

Privilege application group updated successfully

Copied!
  {
    "status": true
  }
                
Show full

Sample Response: HTTP 401

Authentication credentials missing or invalid

Copied!
  {
    "errorMessage": "Authentication credentials are missing or invalid",
    "errorCode": "UNAUTHORIZED"
  }
                
Show full

Sample Response: HTTP 500

Internal error while updating privilege app group

Copied!
  {
    "errorMessage": "Error Occurred while add or update privilege app group",
    "errorCode": "INTERNAL_ERROR"
  }
                
Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.