# Clone a published add-on management profile

Clones a published add-on management profile into a new draft version, preserving all browser-specific payload configurations. Only published profiles can be cloned.

## Endpoint

`POST /bsp/api/v1/bmp/manage_addons/{addon_id}/clone`

## Request

### Request URL

```text
https://{server-hostname}:8383/bsp/api/v1/bmp/manage_addons/{addon_id}/clone
```

### Scope

```text
BrowserManager.CREATE
```

### Header

```text
Authorization: d92d4xxxxxxxxxxxxx15f52
```

### Request Parameters

#### Request Headers

- **Accept** (`string`, Mandatory): `application/json`

#### Path Parameters

- **addon_id** (`string`, Mandatory): Add-On Management Profile ID from [List Add-On Management Profiles](https://www.manageengine.com/products/desktop-central/help/api/onpremise/add-on-management-list-addon-profiles.html) response (`manage_addon_id` field).

### Sample Request

```bash
curl --request POST \
  --url https://appdomain/bsp/api/v1/bmp/manage_addons/{addon_id}/clone \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response body: `application/json`

- JSON Object
  - **collection_id** (`string`): Collection reference ID for the profile.
  - **profile_type** (`string`): Profile type identifier.
  - **platform_type** (`string`): Platform type. `1=Windows`, `2=Mac`, `-1=All platforms`.
  - **latest_version** (`string`): Latest version number of the profile.
  - **is_moved_to_trash** (`boolean`): Whether the profile is in the trash.
  - **manage_addon_name** (`string`): Profile display name.
  - **scope** (`string`): Profile scope. `0=device`, `1=user`.
  - **latest_published_version** (`string`): Latest published version, or `'--'` if not yet published.
  - **manage_addon_description** (`string`): Profile description.
  - **manage_addon_id** (`string`): Unique profile identifier.
  - **addon_payloads** (`JSON Array`): Payload configurations associated with this profile.

### HTTP Code 401

Response body: `application/json`

- JSON Object
  - **errorCode** (`long`): Unauthorized error code returned when authentication credentials are missing, expired, or invalid (`authentication=required`).
  - **errorMsg** (`string`): Authentication failure reason.

### HTTP Code 403

Response body: `application/json`

- JSON Object
  - **errorCode** (`long`): Forbidden error code returned when the authenticated user does not have the required uem-roles (for example, `DataEncryption_Admin` or `DataEncryptionRecoveryKey_Admin`).
  - **errorMsg** (`string`): Message indicating insufficient privileges to access this resource.

### HTTP Code 404

Response body: `application/json`

- JSON Object
  - **errormsg** (`string`): Message indicating the requested resource was not found.

### HTTP Code 409

Response body: `application/json`

- JSON Object
  - **errormsg** (`string`): Message indicating why the clone operation cannot be performed.

### HTTP Code 429

Response body: `application/json`

- JSON Object
  - **errorCode** (`long`): Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes.
  - **errorMsg** (`string`): Rate limit exceeded message with retry guidance.

### HTTP Code 500

Response body: `application/json`

- JSON Object
  - **errormsg** (`string`): Message describing the internal server error.

## Possible Response Codes

- **200**: HTTP code
- **401**: HTTP code
- **403**: HTTP code
- **404**: HTTP code
- **409**: HTTP code
- **429**: HTTP code
- **500**: HTTP code

## Sample Responses

### HTTP 200

Cloned as new draft version.

```json
{
  "collection_id": "222",
  "profile_type": "64025",
  "platform_type": "1",
  "latest_version": "2",
  "is_moved_to_trash": false,
  "manage_addon_name": "FullTest_Renamed",
  "scope": "0",
  "latest_published_version": "1",
  "manage_addon_description": "Renamed description",
  "manage_addon_id": "996",
  "addon_payloads": [
    {
      "restrict_permissions": "1",
      "config_name": "MANAGE_CHROME_ADDONS",
      "payload_type": "64125",
      "restrict_domains": "-1",
      "payload_id": "1166",
      "binaries_details": [
        {
          "browser_type": "1",
          "name": "Google Translate",
          "binary_id": "30",
          "id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
        }
      ],
      "permissions": [
        {
          "name": "Context menu",
          "id": "10"
        }
      ],
      "pinned_binaries_details": [
        {
          "browser_type": "1",
          "name": "Google Translate",
          "binary_id": "30",
          "id": "aapbdbdomjkkjkaonfhkkikfgjllcleb"
        }
      ],
      "browser_type": "1",
      "policies": {
        "disable_user_extensions": "1",
        "allow_flash": "-1"
      },
      "restrict_addons": "1",
      "native_hosts": {
        "native_permission": "-1",
        "native_details": []
      }
    }
  ]
}
```

### HTTP 401

Unauthorized.

```json
{
  "errorCode": "UNAUTHORIZED",
  "errorMsg": "You are not authorized to perform this action"
}
```

### HTTP 403

Insufficient permissions.

```json
{
  "errorCode": "FORBIDDEN",
  "errorMsg": "User does not have permission to perform this operation"
}
```

### HTTP 404

Profile not found.

```json
{
  "errormsg": "Profile not found"
}
```

### HTTP 409

Profile must be published to clone.

```json
{
  "errormsg": "Cannot clone unpublished profile."
}
```

### HTTP 429

Rate limit exceeded.

```json
{
  "errorCode": "RATE_LIMIT_EXCEEDED",
  "errorMsg": "Too many requests. Please try again after 5 minutes"
}
```

### HTTP 500

Server error.

```json
{
  "errormsg": "Internal Server error, Please try again in a moment."
}
```

## Rate Limits

**Duration:** 1 minute | **Threshold:** 60 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.