Modifies an existing custom CIS compliance policy group, updating its name and replacing the associated benchmark profiles
https://{server-hostname}:8383/dcapi/scap/compliance/policygroups/{policyGrpId}
VulnerabilityMgmt.UPDATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
The ID of the policy group to delete. Fetch from List Policy Groups
List of CIS benchmark profile objects to associate with the policy group. Fetch available profiles from Get Profiles List for Platform
Profile ID. Fetch from Get Profiles List for Platform
Profile type. 1 = XCCDF. Fetch from Get Profiles List for Platform
Name of the policy group
Platform identifier. 1 = Windows, 3 = Linux
curl --request POST \
--url https://appdomain/dcapi/scap/compliance/policygroups/{policyGrpId} \
--header 'Accept: application/editPolicyGrp.v1+json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/editPolicyGrp.v1+json' \
--data '{"groupName":"Updated Policy Group Name","profiles":[{"id":"50001","type":1},{"id":"50003","type":1}]}'Modify an existing policy group name and replace its profiles
{
"groupName": "Updated Policy Group Name",
"profiles": [
{
"id": "50001",
"type": 1
},
{
"id": "50003",
"type": 1
}
]
}
true if the policy group was modified successfully, false otherwise
Error message when the policy group ID is not found
HTTP status code (400)
API-specific error code identifying the validation failure
Error message describing the validation failure
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Policy group modified successfully
{
"status": true
}
Policy group ID not found
{
"statusMsg": "policy grp id not present",
"status": false
}
A request body parameter has an invalid format or type
{
"errorCode": "IAM0025",
"url": "/dcapi/scap/compliance/policygroups/{policyGrpId}",
"errorMsg": "id is an invalid parameter format."
}
User is action-restricted for this policy group
{
"errorMessage": "User Not Authorized",
"errorCode": "UAC_UNAUTHORIZED"
}
API call threshold exceeded
{
"errorMessage": "Rate limit exceeded. Retry after some time",
"errorCode": "TOO_MANY_REQUESTS"
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.