Adds a browser-specific add-on payload to an add-on management profile. Payloads cannot be added to a published profile.
https://{server-hostname}:8383/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads
BrowserManager.CREATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Add-On Management Profile ID from List Add-On Management Profiles response (manage_addon_id field)
JSON body with payload configuration. Uses flat format: addon_payloads contains payload_type and browser_type directly. Each browser type has different supported keys refer to the examples below
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"addon_payloads":{"restrict_permissions":1,"payload_type":64125,"runtime_addons":[],"restrict_domains":-1,"pinned_addons":["30"],"permissions":["10"],"browser_type":1,"policies":{"disable_user_extensions":"1"},"add_ons":[{"binary_id":"30"}],"restrict_addons":"1","native_hosts":{"native_permission":"-1","native_ids":[]},"install_addons":["30"]}}'Chrome payload (browser_type=1)
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64125,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 1,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
},
"install_addons": [
"30"
]
}
}
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"addon_payloads":{"payload_type":64127,"restrict_domains":-1,"browser_type":2,"policies":{"disable_user_extensions":"1"},"add_ons":[{"binary_id":"13"}],"restrict_addons":"1","install_addons":["13"]}}'Firefox payload (browser_type=2). No permissions, native_hosts, or pinned_addons.
{
"addon_payloads": {
"payload_type": 64127,
"restrict_domains": -1,
"browser_type": 2,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "13"
}
],
"restrict_addons": "1",
"install_addons": [
"13"
]
}
}
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"addon_payloads":{"restrict_permissions":1,"payload_type":64907,"runtime_addons":[],"restrict_domains":-1,"pinned_addons":["30"],"permissions":["10"],"browser_type":5,"policies":{"disable_user_extensions":"1"},"add_ons":[{"binary_id":"30"}],"restrict_addons":"1","native_hosts":{"native_permission":"-1","native_ids":[]},"install_addons":["30"]}}'Edge payload (browser_type=5). Same shape as Chrome; uses Edge-specific binary_ids.
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64907,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 5,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
},
"install_addons": [
"30"
]
}
}
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"addon_payloads":{"restrict_permissions":1,"payload_type":64459,"runtime_addons":[],"restrict_domains":-1,"pinned_addons":["30"],"permissions":["10"],"browser_type":31,"policies":{"disable_user_extensions":"1"},"add_ons":[{"binary_id":"30"}],"restrict_addons":"1","native_hosts":{"native_permission":"-1","native_ids":[]}}}'Ulaa payload (browser_type=31). Same shape as Chrome; shares Chrome's extension store.
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64459,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 31,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
}
}
}
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"addon_payloads":{"restrict_permissions":1,"payload_type":64409,"runtime_addons":[],"restrict_domains":-1,"pinned_addons":["30"],"permissions":["10"],"browser_type":1024,"policies":{"disable_user_extensions":"1"},"add_ons":[{"binary_id":"30"}],"restrict_addons":"1","native_hosts":{"native_permission":"-1","native_ids":[]}}}'Other Chromium payload (browser_type=1024). Same shape as Chrome plus applicable_browsers array.
{
"addon_payloads": {
"restrict_permissions": 1,
"payload_type": 64409,
"runtime_addons": [],
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 1024,
"policies": {
"disable_user_extensions": "1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
}
}
}
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/manage_addons/{addon_id}/addon_payloads \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"addon_payloads":{"restrict_permissions":-1,"payload_type":64126,"restrict_domains":-1,"permissions":[],"browser_type":3,"policies":{"turn_off_blocking_outdated_addon":"1","restrict_activex":"0","remove_run_this_time":"0","enable_extensions":"1"},"add_ons":[],"restrict_addons":"0"}}'IE payload (browser_type=3). Uses IE-specific policies; no permissions, native_hosts, or pinned_addons.
{
"addon_payloads": {
"restrict_permissions": -1,
"payload_type": 64126,
"restrict_domains": -1,
"permissions": [],
"browser_type": 3,
"policies": {
"turn_off_blocking_outdated_addon": "1",
"restrict_activex": "0",
"remove_run_this_time": "0",
"enable_extensions": "1"
},
"add_ons": [],
"restrict_addons": "0"
}
}
Newly added payload configurations. Schema branches by target browser
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Forbidden error code returned when the authenticated user does not have the required uem-roles (e.g., DataEncryption_Admin or DataEncryptionRecoveryKey_Admin)
Message indicating insufficient privileges to access this resource
Message indicating the requested resource was not found
Message indicating a published profile cannot be modified
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Message describing the internal server error
Chrome payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64125",
"restrict_domains": "-1",
"binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"payload_id": "1170",
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"browser_type": "1",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "MANAGE_CHROME_ADDONS"
}
]
}
Firefox payload added
{
"addon_payloads": [
{
"payload_type": "64127",
"restrict_domains": "-1",
"binaries_details": [
{
"browser_type": "2",
"name": "System theme — auto",
"binary_id": "13",
"id": "default-theme@mozilla.org"
}
],
"payload_id": "1171",
"pinned_binaries_details": [],
"browser_type": "2",
"policies": {
"disable_user_extensions": "1"
},
"restrict_addons": "1",
"config_label": "MANAGE_FIREFOX_ADDONS"
}
]
}
Edge payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64907",
"restrict_domains": "-1",
"binaries_details": [],
"payload_id": "1172",
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [],
"browser_type": "5",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "CHROMIUM_EDGE_ADDONS_PAYLOAD"
}
]
}
Ulaa payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64459",
"restrict_domains": "-1",
"binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"payload_id": "1173",
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"browser_type": "31",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "MANAGE_ULAA_ADDONS"
}
]
}
Chromium payload added
{
"addon_payloads": [
{
"restrict_permissions": "1",
"payload_type": "64409",
"restrict_domains": "-1",
"payload_id": "1174",
"browser_type": "1024",
"policies": {
"disable_user_extensions": "1",
"allow_flash": "-1"
},
"applicable_browsers": [],
"binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"permissions": [
{
"name": "Context menu",
"id": "10"
}
],
"pinned_binaries_details": [
{
"browser_type": "1",
"name": "Google Translate",
"binary_id": "30",
"id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_details": []
},
"config_label": "CHROMIUM_ADDONS_PAYLOAD"
}
]
}
IE payload added
{
"addon_payloads": [
{
"payload_type": "64126",
"restrict_domains": "-1",
"binaries_details": [],
"payload_id": "1175",
"pinned_binaries_details": [],
"browser_type": "3",
"policies": {
"turn_off_blocking_outdated_addon": "1",
"enable_extension": "1",
"restrict_activex": "0",
"remove_run_this_time": "0"
},
"restrict_addons": "0",
"config_label": "MANAGE_IE_ADDONS"
}
]
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Insufficient permissions
{
"errorCode": "FORBIDDEN",
"errorMsg": "User does not have permission to perform this operation"
}
Profile not found
{
"errormsg": "Profile not found"
}
Cannot modify published profile
{
"errormsg": "Cannot modify published policy. Clone the policy and retry"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "Too many requests. Please try again after 5 minutes"
}
Server error
{
"errormsg": "Internal Server error, Please try again in a moment."
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.