Creates a new custom CIS compliance policy group with the specified name, platform, and associated benchmark profiles
post /dcapi/scap/compliance/policygroups
https://{server-hostname}:8383/dcapi/scap/compliance/policygroups
VulnerabilityMgmt.CREATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
List of CIS benchmark profile objects to associate with the policy group. Fetch available profiles from Get Profiles List for Platform
Profile ID. Fetch from Get Profiles List for Platform
Profile type. 1 = XCCDF. Fetch from Get Profiles List for Platform
Name of the policy group
Platform identifier. 1 = Windows, 3 = Linux
curl --request POST \
--url https://appdomain/dcapi/scap/compliance/policygroups \
--header 'Accept: application/createPolicyGrp.v1+json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/createPolicyGrp.v1+json' \
--data '{"groupName":"Windows CIS Level 1 Policy","profiles":[{"id":"50001","type":1},{"id":"50002","type":1}],"platform":1}'Create a new custom CIS compliance policy group with benchmark profiles
{
"groupName": "Windows CIS Level 1 Policy",
"profiles": [
{
"id": "50001",
"type": 1
},
{
"id": "50002",
"type": 1
}
],
"platform": 1
}
true if the policy group was created successfully, false otherwise
HTTP status code (400)
API-specific error code identifying the validation failure
Error message describing the validation failure
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Policy group created successfully
{
"status": true
}
Policy group creation failed
{
"status": false
}
A request body parameter has an invalid format or type
{
"errorCode": "IAM0025",
"url": "/dcapi/scap/compliance/policygroups",
"errorMsg": "id is an invalid parameter format."
}
Authentication credentials are missing or invalid
{
"errorMessage": "Authentication required",
"errorCode": "UNAUTHORIZED"
}
API call threshold exceeded
{
"errorMessage": "Rate limit exceeded. Retry after some time",
"errorCode": "TOO_MANY_REQUESTS"
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.