Updates an existing compliance profile's name, description, or rules.
https://{server-hostname}:8383/bsp/api/v1/bmp/compliance/{compliance_id}/profiles
BrowserManager.UPDATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Compliance profile ID from List Compliance Profiles response (profileid field)
Name of the compliance profile. Maximum 50 characters.
Description of the compliance profile. Maximum 100 characters.
Compliance rule IDs from List All Compliance Rules response (rule_id field) to attach to the profile. Accepts 1 to 50 rule IDs.
curl --request PUT \
--url https://appdomain/bsp/api/v1/bmp/compliance/{compliance_id}/profiles \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"profile_name":"Chrome Security Baseline","rule_ids":[351,357,362,367,377],"profile_description":"Baseline compliance for Chrome browsers"}'Modify profile with rule IDs from List All Compliance Rules response (rule_id field)
{
"profile_name": "Chrome Security Baseline",
"rule_ids": [
351,
357,
362,
367,
377
],
"profile_description": "Baseline compliance for Chrome browsers"
}
Collection ID associated with this profile version
Name of the compliance profile
Compliance details including attached rule IDs and compliance ID
Compliance rule IDs from List All Compliance Rules response (rule_id field) attached to this profile
Internal compliance ID associated with this profile
Profile type code. 64500=Custom, 64501=STIG, 64502=CIS
Latest version number of this profile
Whether the profile has been moved to trash. false indicates active
Unique identifier of the compliance profile
Scope of the profile. 0 indicates organization-wide
Latest published version number of this profile
Description of the compliance profile
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Forbidden error code returned when the authenticated user does not have the required uem-roles (e.g., DataEncryption_Admin or DataEncryptionRecoveryKey_Admin)
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Returns 500 with no response body when an invalid compliance_id is provided.
Profile modified
{
"collection_id": "222",
"profile_name": "Chrome Security Baseline",
"compliance_details": {
"rule_ids": [
351,
357,
362,
367,
377
],
"compliance_id": "303"
},
"profile_type": "64500",
"latest_version": "1",
"is_moved_to_trash": false,
"profile_id": "111",
"scope": "0",
"latest_published_version": "1",
"profile_description": "Baseline compliance for Chrome browsers"
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
500 Returns 500 with no response body when an invalid compliance_id is provided.![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.