Retrieves the per-rule compliance status of a browser on a device against the default BSP compliance rules.
https://{server-hostname}:8383/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance
BrowserManager.READCopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Browser ID from List Browsers response (browser_type field)
Device resource ID from List Devices response (device_id field)
curl --request GET \
--url https://appdomain/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52'Compliance details for a device, wrapped in a devices array
Device compliance objects
Individual device compliance entry
Compliance profile details
Compliance details for a single compliance profile
Compliance category breakdowns
Count of devices compliant for this category
Count of devices noncompliant for this category
Overall security compliance percentage
Compliance profile ID
Individual rule compliance statuses
Individual compliance rule status
Rule ID
Rule name identifier
Compliance status: 0 for non-compliant, 1 for compliant
Rule criticality level: 1 (low), 2 (medium), 3 (high)
Device resource ID as a string identifier
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
RBCA scope violation when device is not in the user's managed scope
Error code indicating the device is outside the user's managed scope
Message indicating the device is not accessible to the current user
Request URL that triggered the error
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Internal server error during device operations
Message describing the server-side failure
Internal server error code
Empty compliance
{
"devices": []
}
Browser compliance details
{
"devices": [
{
"compliance_details": [
{
"category_details": [
{
"rule_id": "1",
"non_compliant_rules": [
6,
12,
14
],
"rule_name": "Data Leakage Prevention",
"security_percentage": "6.6666669845581055",
"yet_to_scan": [],
"compliant_rules": [
18
]
},
{
"rule_id": "2",
"non_compliant_rules": [
16,
5
],
"rule_name": "Threat Prevention",
"security_percentage": "27.272727966308594",
"yet_to_scan": [],
"compliant_rules": [
10
]
}
],
"security_percentage": "12.195121765136719",
"compliance_id": "1",
"rule_status": [
{
"rule_id": "6",
"rule_name": "IE_warn_cert_addr_mismatch",
"compliant_status": "0",
"criticality": "3"
},
{
"rule_id": "10",
"rule_name": "critical_permissions",
"compliant_status": "1",
"criticality": "3"
},
{
"rule_id": "18",
"rule_name": "sideload_extensions",
"compliant_status": "1",
"criticality": "2"
}
]
}
],
"device_id": "999"
}
]
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Device not in scope
{
"errorCode": "FORBIDDEN",
"url": "/bsp/api/v1/bmp/devices/{device_id}/browsers/{browser_id}/compliance",
"errorMsg": "The requested device is not in your managed scope"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.