# Fetch custom groups available for compliance audit association

Retrieves a paginated list of static and static-unique custom groups available for compliance audit association. Supports filtering by group category and name.

## Endpoints

`GET /dcapi/scap/compliance/map/customGroups`

## Request URL

`https://{server-hostname}:8383/dcapi/scap/compliance/map/customGroups`

### Scope

`VulnerabilityMgmt.READ`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

### Sample Request

```curl
curl --request GET \
  --url https://appdomain/dcapi/scap/compliance/map/customGroups \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP code 200

Response Body — `application/json`

- JSON object
  - **customGroups** — JSON array
    - List of custom group objects

### HTTP code 401

Response Body — `application/json`

- JSON object
  - **errorCode** — long
    - Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
  - **errorMsg** — string
    - Authentication failure reason

### HTTP code 429

Response Body — `application/json`

- JSON object
  - **errorCode** — long
    - Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
  - **errorMsg** — string
    - Rate limit exceeded message with retry guidance

## Possible Response Codes

- **200** — HTTP code
- **401** — HTTP code
- **429** — HTTP code

## Sample Response: HTTP 200

Paginated list of custom groups for compliance audit

```json
{
  "customGroups": [
    {
      "image": "/images/static_group.png",
      "name": "Production Servers",
      "id": "301",
      "category": 2
    },
    {
      "image": "/images/all_computers.png",
      "name": "All Managed Computers",
      "id": "302",
      "category": 7
    }
  ]
}
```

## Sample Response: HTTP 401

Authentication credentials are missing or invalid

```json
{
  "errorMessage": "Authentication required",
  "errorCode": "UNAUTHORIZED"
}
```

## Sample Response: HTTP 429

API call threshold exceeded

```json
{
  "errorMessage": "Rate limit exceeded. Retry after some time",
  "errorCode": "TOO_MANY_REQUESTS"
}
```

![ ](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 300 | **Lock period:** 5 minutes

Duration — Time window for the threshold.  
Threshold — Number of API calls allowed within the specified duration.  
Lock Period — Wait time before consecutive API requests.