Retrieves all compliance profiles configured in your organization.
get /bsp/api/v1/bmp/compliance/profiles
https://{server-hostname}:8383/bsp/api/v1/bmp/compliance/profiles Copied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Include trashed profiles in results. Example: true, false
Filter by compliance profile type. Example: '64500' (Custom), '64501' (STIG), '64502' (CIS)
curl --request GET \
--url 'https://appdomain/bsp/api/v1/bmp/compliance/profiles?trash=SOME_BOOLEAN_VALUE&type=SOME_STRING_VALUE' \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52'Compliance profile summaries
Unique identifier of the compliance profile
Name of the compliance profile
Profile type code.
Number of compliance rules attached to this profile
Last modified timestamp formatted as 'MMM dd, yyyy hh:mm a'
Unique identifier of the compliance profile
Name of the compliance profile
Profile type code.
Number of compliance rules attached to this profile
Last modified timestamp formatted as 'MMM dd, yyyy hh:mm a'
Error code indicating the type query parameter has an invalid format
Message specifying which parameter has an invalid format
Request URL that triggered the error
Unauthorized error code: API key or OAuth token missing, expired or invalid
Authentication failure reason
Forbidden error code: the user lacks the required MDM_OSUpdateMgmt UEM role
Message indicating insufficient privileges
Rate limit error code: API call threshold exceeded for this endpoint group
Rate limit exceeded message with retry guidance
Message describing the server-side failure
Internal server error code
Profile list
{
"compliance": [
{
"profiletype": 64500,
"profileid": 111,
"profilename": "Chrome Security Baseline",
"last_modified": "Mar 10, 2026 10:30 AM",
"rule_count": 15
},
{
"profiletype": 64501,
"profileid": 111,
"profilename": "STIG Compliance",
"last_modified": "Feb 15, 2026 02:00 PM",
"rule_count": 34
}
]
}
Invalid type parameter
{
"errorCode": "IAM0025",
"url": "/bsp/api/v1/bmp/compliance/profiles",
"errorMsg": "type is an invalid parameter format."
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.