# Get a browser's compliance details against a specific profile

Retrieves the per-rule compliance status of a browser on a device against the specified compliance profile.

## Endpoint

`GET /bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}`

## Request

### Request URL

`https://{server-hostname}:8383/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}`

### Scope

`BrowserManager.READ`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

- **Accept** `string` — Mandatory
  - `application/json`

#### Path Parameters

- **browser_id** `string` — Mandatory
  - Browser ID from [List Browsers](https://www.manageengine.com/products/desktop-central/help/api/onpremise/inventory-list-browsers.html) response (`browser_type` field)
- **device_id** `string` — Mandatory
  - Device resource ID from [List Devices](https://www.manageengine.com/products/desktop-central/help/api/onpremise/inventory-list-devices.html) response (`device_id` field)
- **compliance_id** `string` — Mandatory
  - Compliance profile ID from [List Compliance Profiles](https://www.manageengine.com/products/desktop-central/help/api/onpremise/compliance-list-compliance-profiles.html) response (`profileid` field)

### Sample Request

```curl
curl --request GET \
  --url https://appdomain/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id} \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response Body — `application/json`

`JSON Object`

Raw JSONArray of compliance details.

- **device_id** `string`
  - Device resource ID
- **compliance_details** `JSON Array`
  - Compliance profile details

### HTTP Code 401

Response Body — `application/json`

`JSON Object`

- **errorCode** `long`
  - Unauthorized error code returned when authentication credentials are missing, expired, or invalid (`authentication=required`)
- **errorMsg** `string`
  - Authentication failure reason

### HTTP Code 403

Response Body — `application/json`

`JSON Object`

RBCA scope violation when device is not in the user's managed scope.

- **errorCode** `string`
  - Error code indicating the device is outside the user's managed scope
- **errorMsg** `string`
  - Message indicating the device is not accessible to the current user
- **url** `string`
  - Request URL that triggered the error

### HTTP Code 429

Response Body — `application/json`

`JSON Object`

- **errorCode** `long`
  - Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
- **errorMsg** `string`
  - Rate limit exceeded message with retry guidance

### HTTP Code 500

Response Body — `application/json`

`JSON Object`

Internal server error during device operations.

- **error_description** `string`
  - Message describing the server-side failure
- **error_code** `string`
  - Internal server error code

### Possible Response Codes

- `200` HTTP code
- `401` HTTP code
- `403` HTTP code
- `429` HTTP code
- `500` HTTP code

### Sample Response: HTTP 200

#### Compliance against the default profile

```json
[
  {
    "compliance_details": [
      {
        "category_details": [
          {
            "rule_id": "1",
            "non_compliant_rules": [
              6,
              42,
              43,
              12,
              44,
              45,
              14,
              46,
              47,
              48,
              17,
              50,
              51,
              52
            ],
            "rule_name": "Data Leakage Prevention",
            "security_percentage": "17.647058486938477",
            "yet_to_scan": [],
            "compliant_rules": [
              18
            ]
          },
          {
            "rule_id": "2",
            "non_compliant_rules": [
              16,
              68,
              5
            ],
            "rule_name": "Threat Prevention",
            "security_percentage": "52.94117736816406",
            "yet_to_scan": [],
            "compliant_rules": [
              10
            ]
          }
        ],
        "security_percentage": "29.411766052246094",
        "compliance_id": "1",
        "rule_status": [
          {
            "rule_id": "51",
            "rule_name": "background_mode_chrome",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "10",
            "rule_name": "critical_permissions",
            "compliant_status": "1",
            "criticality": "3"
          },
          {
            "rule_id": "16",
            "rule_name": "download_restriction",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "5",
            "rule_name": "phishing_filter",
            "compliant_status": "0",
            "criticality": "3"
          },
          {
            "rule_id": "18",
            "rule_name": "sideload_extensions",
            "compliant_status": "1",
            "criticality": "2"
          },
          {
            "rule_id": "14",
            "rule_name": "third_party_cookie_restriction_chrome",
            "compliant_status": "0",
            "criticality": "1"
          }
        ]
      }
    ],
    "device_id": "888"
  }
]
```

#### Compliance against a specific profile

```json
[
  {
    "compliance_details": [
      {
        "category_details": [
          {
            "rule_id": "1",
            "non_compliant_rules": [
              328,
              12,
              205,
              333,
              14,
              17,
              339,
              215,
              472,
              345,
              220,
              285,
              351,
              162,
              290,
              482,
              357,
              296,
              362,
              367,
              431,
              306,
              51,
              249,
              313,
              377
            ],
            "rule_name": "Data Leakage Prevention",
            "security_percentage": "3.7735848426818848",
            "yet_to_scan": [],
            "compliant_rules": [
              447
            ]
          },
          {
            "rule_id": "2",
            "non_compliant_rules": [
              195,
              259,
              323,
              200,
              264,
              396,
              269,
              210,
              275,
              152,
              280,
              157,
              224,
              416,
              229,
              421,
              167,
              234,
              426,
              171,
              301,
              175,
              239,
              369,
              372,
              180,
              244,
              185,
              190,
              254,
              318
            ],
            "rule_name": "Threat Prevention",
            "security_percentage": "16.438356399536133",
            "yet_to_scan": [],
            "compliant_rules": [
              467,
              437,
              457,
              442,
              462,
              478
            ]
          }
        ],
        "security_percentage": "11.111111640930176",
        "compliance_id": "3",
        "rule_status": [
          {
            "rule_id": "152",
            "rule_name": "allow_cross_origin_auth_prompt",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "467",
            "rule_name": "cert_transparency_enforce_disabled_urls",
            "compliant_status": "1",
            "criticality": "2"
          },
          {
            "rule_id": "396",
            "rule_name": "disable_safe_browsing_proceed_anyway",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "351",
            "rule_name": "dns_over_https_mode",
            "compliant_status": "0",
            "criticality": "2"
          },
          {
            "rule_id": "437",
            "rule_name": "hsts_policy_bypass_list",
            "compliant_status": "1",
            "criticality": "2"
          },
          {
            "rule_id": "447",
            "rule_name": "web_rtc_local_ips_allowed_urls",
            "compliant_status": "1",
            "criticality": "2"
          }
        ]
      }
    ],
    "device_id": "777"
  }
]
```

### Sample Response: HTTP 401

#### Unauthorized

```json
{
  "errorCode": "UNAUTHORIZED",
  "errorMsg": "You are not authorized to perform this action"
}
```

### Sample Response: HTTP 403

#### Device not in scope

```json
{
  "errorCode": "FORBIDDEN",
  "url": "/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance/{compliance_id}",
  "errorMsg": "The requested device is not in your managed scope"
}
```

### Sample Response: HTTP 429

#### Rate limit exceeded

```json
{
  "errorCode": "RATE_LIMIT_EXCEEDED",
  "errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
```

### Sample Response: HTTP 500

#### Server error

```json
{
  "error_description": "Internal Server error, Please try again in a moment.",
  "error_code": "COM0004"
}
```

## Rate Limit

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 60 | **Lock period:** 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.