# Fetch quarantine policy configuration for a custom group

Retrieves the complete quarantine policy configuration including rules, restrictions, warning and grace period settings, and notification preferences for the specified custom group

## Endpoint

`GET /dcapi/compliance/quarantine/policy/{grpResourceId}`

## Request URL

`https://{server-hostname}:8383/dcapi/compliance/quarantine/policy/{grpResourceId}`

## Scope

`VulnerabilityMgmt.READ`

## Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Path Parameters

**grpResourceId** `string` **Mandatory**

The resource ID of the quarantine custom group to delete. Fetch from [Get Quarantine Rule Details](https://www.manageengine.com/products/desktop-central/help/api/onpremise/get-quarantine-rule-details.html)

## Sample Request

```curl
curl --request GET \
  --url https://appdomain/dcapi/compliance/quarantine/policy/{grpResourceId} \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response Body: `application/json`

`JSON Object`

- **customGroup** `long`: Custom group resource ID
- **collectionId** `long`: Associated quarantine collection ID
- **cgName** `string`: Custom group name
- **status** `string`: Collection deployment status
- **quarantineRules** `array`: List of configured quarantine rules including patch severity, software, service, vulnerability, registry, and file checks
- **quarantineRestrictions** `JSON Object`: Action type and network restriction configuration for quarantine enforcement
- **enableWarnUser** `boolean`: Whether user warning dialog is enabled
- **warningTitle** `string`: Warning dialog title text
- **warningDesc** `string`: Warning dialog description text
- **enableGracePeriod** `boolean`: Whether grace period is configured before enforcement
- **graceTitle** `string`: Grace period notification title
- **graceDesc** `string`: Grace period notification description
- **gracePeriod** `string`: Grace period duration in days
- **graceNotificationTime** `string`: Time for grace notification in HH:mm format
- **ENABLE_EMAIL_NOTIFY** `boolean`: Whether email notifications are enabled
- **EMAIL_DURATION** `string`: Email notification duration
- **EMAIL_ENABLED_DAYS** `string`: Comma-separated days when email notifications are active
- **EMAIL** `string`: Notification email address
- **ENABLE_MOBILE_NOTIFY_FOR_USERS** `array`: List of users enabled for mobile notifications

### HTTP Code 401

Response Body: `application/json`

`JSON Object`

- **errorCode** `long`: Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
- **errorMsg** `string`: Authentication failure reason

### HTTP Code 403

Response Body: `application/json`

`JSON Object`

- **errorCode** `long`: Forbidden error code returned when the authenticated user does not have the required uem-roles (e.g., DataEncryption_Admin or DataEncryptionRecoveryKey_Admin)
- **errorMsg** `string`: Message indicating insufficient privileges to access this resource

### HTTP Code 429

Response Body: `application/json`

`JSON Object`

- **errorCode** `long`: Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
- **errorMsg** `string`: Rate limit exceeded message with retry guidance

## Possible Response Codes

- `200` HTTP code
- `401` HTTP code
- `403` HTTP code
- `429` HTTP code

## Sample Response: HTTP 200

Full quarantine policy configuration with target group details

```json
{
  "quarantineRestrictions": {
    "quarantineAction": "2",
    "blockAction": "2",
    "allowRestrictAccess": [
      {
        "condition": "domain",
        "value": "*.company.com"
      }
    ]
  },
  "warningDesc": "Your system will be quarantined.",
  "gracePeriod": "7",
  "graceDesc": "Resolve issues within the grace period.",
  "quarantineRules": [
    {
      "condition": "osPatch",
      "interval": "30",
      "severities": [
        "critical",
        "important"
      ]
    },
    {
      "condition": "software",
      "softwareName": "TeamViewer",
      "status": "installed"
    },
    {
      "condition": "vulnerability",
      "operation": "cvss",
      "value": "7.0"
    }
  ],
  "warningTitle": "Non-Compliant System",
  "EMAIL_DURATION": "1",
  "graceTitle": "Grace Period",
  "EMAIL": "security@company.com",
  "ENABLE_MOBILE_NOTIFY_FOR_USERS": [
    "admin1"
  ],
  "enableGracePeriod": true,
  "cgName": "DMZ Servers",
  "enableWarnUser": true,
  "ENABLE_EMAIL_NOTIFY": true,
  "customGroup": 301,
  "EMAIL_ENABLED_DAYS": "1,2,3,4,5",
  "graceNotificationTime": "10:00",
  "collectionId": 6001,
  "status": "Deployed"
}
```

Quarantine rules and restrictions only (`excludeTargets=true`)

```json
{
  "quarantineRestrictions": {
    "quarantineAction": "1"
  },
  "quarantineRules": [
    {
      "condition": "osPatch",
      "interval": "30",
      "severities": [
        "critical"
      ]
    }
  ],
  "ENABLE_EMAIL_NOTIFY": false,
  "EMAIL_DURATION": "",
  "EMAIL_ENABLED_DAYS": "",
  "EMAIL": "",
  "ENABLE_MOBILE_NOTIFY_FOR_USERS": [],
  "status": "Deployed"
}
```

## Sample Response: HTTP 401

User lacks scope access to the custom group

```json
{
  "errorMessage": "User Not Authorized",
  "errorCode": "UAC_UNAUTHORIZED"
}
```

## Sample Response: HTTP 403

Quarantine is not available in VMP Professional Edition

```json
{
  "errorMessage": "You do not have enough permission to perform this action. Upgrade to Enterprise Edition to use these features.",
  "errorCode": "FORBIDDEN"
}
```

## Sample Response: HTTP 429

API call threshold exceeded

```json
{
  "errorMessage": "Rate limit exceeded. Retry after some time",
  "errorCode": "TOO_MANY_REQUESTS"
}
```

![ ](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.