Creates a new add-on management profile (Chrome, Firefox, Edge, IE, Ulaa, or other Chromium) with optional browser-specific payload configurations.
post /bsp/api/v1/bmp/manage_addons
https://{server-hostname}:8383/bsp/api/v1/bmp/manage_addons
BrowserManager.CREATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
JSON body with profile metadata including name, description, payload configurations, and platform type
Profile name (max 500 characters)
Profile description (optional, max 500 characters)
Browser-specific add-on policy configuration. Schema branches by browser_type see addonPayloadChromeBody / addonPayloadFirefoxBody / addonPayloadEdgeBody / addonPayloadUlaaBody / addonPayloadChromiumBody / addonPayloadIEBody
Payload type. Fixed value: 64125 (Chrome)
Browser type. Fixed value: 1 (Chrome)
Whether to restrict user-installed add-ons. '0'=allow, '1'=restrict
Allowed or managed add-ons by binary_id
Managed add-on entry referenced by binary_id
Unique add-on/extension identifier from the browser store
Installation type for the add-on (e.g. allow, force-install, block)
Domain restriction policy. -1 = no restriction
Browser-specific Chrome add-on policies (e.g. disable_user_extensions)
Block users from installing extensions outside the managed list
Disable developer mode in the extensions page
Whether to restrict by permission. 1=restrict, -1=do not restrict
Permission IDs allowed
Native messaging host configuration (Chrome supports native messaging)
Native host names allowed to communicate with the browser
Native host names blocked from the browser
Binary IDs to pin to the toolbar
Binary IDs to force-install. Default: []
Per-site runtime allow rules. Default: []
Per-site runtime allow rule for add-ons
Always 1 (allow)
Add-on binary_id strings
Webdomain group IDs from List WebDomain Groups response. [] = all sites
Platform type. 1=Windows, 2=Mac, -1=All platforms
curl --request POST \
--url https://appdomain/bsp/api/v1/bmp/manage_addons \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"platform_type":"-1","manage_addon_description":"","manage_addOn_name":"AddonPolicy 8","addon_payloads":{"manage_chrome_addons":{"restrict_permissions":1,"restrict_domains":-1,"pinned_addons":["30"],"permissions":["10"],"browser_type":1,"policies":{"disable_user_extensions":"-1"},"add_ons":[{"binary_id":"30"}],"restrict_addons":"1","native_hosts":{"native_permission":"-1","native_ids":[]}}}}'Create profile with a Chrome payload
{
"platform_type": "-1",
"manage_addon_description": "",
"manage_addOn_name": "AddonPolicy 8",
"addon_payloads": {
"manage_chrome_addons": {
"restrict_permissions": 1,
"restrict_domains": -1,
"pinned_addons": [
"30"
],
"permissions": [
"10"
],
"browser_type": 1,
"policies": {
"disable_user_extensions": "-1"
},
"add_ons": [
{
"binary_id": "30"
}
],
"restrict_addons": "1",
"native_hosts": {
"native_permission": "-1",
"native_ids": []
}
}
}
}
Create empty profile (add payloads later)
{
"platform_type": "1",
"manage_addon_description": "Standard add-on management policy",
"manage_addOn_name": "Corporate Add-On Policy",
"addon_payloads": {}
}
Collection reference ID for the profile
Profile type identifier
Platform type. 1=Windows, 2=Mac, -1=All platforms
Latest version number of the profile
Whether the profile is in the trash
Profile display name
Profile scope. 0=device, 1=user
Latest published version, or '--' if not yet published
Profile description
Unique profile identifier
Payload configurations associated with this profile
Permission restriction mode. 1=restrict, -1=not restricted. Not present for Firefox payloads
Internal configuration label for the payload type (e.g., MANAGE_CHROME_ADDONS). Returned by Create, Clone, and Get Profile endpoints
Internal configuration label for the payload type (e.g., MANAGE_CHROME_ADDONS). Returned by Add Payload and Modify Payload endpoints instead of config_name
Payload type ID. 64125=Chrome, 64127=Firefox, 64907=Edge, 64459=Ulaa, 64409=Chromium, 64126=IE
Domain restriction mode. 1=restrict, -1=not restricted
Restricted/allowed add-on binaries
Browser type code
Add-on display name
Unique binary identifier
Extension/add-on identifier (webstore ID, Mozilla ID, or CLSID)
IE add-on type category. Present only for IE binaries
Unique payload identifier
Force-installed extension binaries
Browser type code
Add-on display name
Unique binary identifier
Extension/add-on identifier (webstore ID, Mozilla ID, or CLSID)
IE add-on type category. Present only for IE binaries
Browser type. 1=Chrome, 2=Firefox, 3=IE, 5=Edge, 31=Ulaa, 1024=Chromium
Browser-specific add-on policy settings
Disable user-installed extensions. 1=disabled, -1=not set
Allow Flash. 1=allowed, -1=not set
IE: Disable blocking of outdated add-ons. 1=off, 0=on
IE: Enable browser extensions. 1=enabled, 0=disabled
IE: Restrict ActiveX controls. 1=restricted, 0=not restricted
IE: Remove 'Run this time' button. 1=remove, 0=keep
Add-on restriction mode. 1=restrict, -1=not restricted
Restricted permissions list. Only present when restrict_permissions is enabled and permission IDs are configured
Applicable browser identifiers. Present only for Chromium (browser_type=1024) payloads
Native messaging host configuration. Not present for Firefox payloads
Native host permission mode. 1=restrict, -1=not restricted
Native messaging host details
Message describing why the request is invalid
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Forbidden error code returned when the authenticated user does not have the required uem-roles (e.g., DataEncryption_Admin or DataEncryptionRecoveryKey_Admin)
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Message describing the internal server error
Created profile in Draft status
{
"collection_id": "222",
"profile_type": "64025",
"platform_type": "1",
"latest_version": "1",
"is_moved_to_trash": false,
"manage_addon_name": "TestAddon_CreateEmpty",
"scope": "0",
"latest_published_version": "--",
"manage_addon_description": "Test empty profile",
"manage_addon_id": "993",
"addon_payloads": []
}
Invalid request
{
"errormsg": "Invalid request"
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Insufficient permissions
{
"errorCode": "FORBIDDEN",
"errorMsg": "User does not have permission to perform this operation"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "Too many requests. Please try again after 5 minutes"
}
Server error
{
"errormsg": "Internal Server error, Please try again in a moment."
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.