To create App Lock policy
https://{server-hostname}:8383/api/v1/mdm/profiles/{profile_id}/payloads/applockpolicy
MDMDeviceMgmt.CREATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Unique identifier of the profile. Obtain from the Create Profile or Get Profiles response
Idle refresh timeout for web app kiosk in seconds. -1 means disabled. Default: -1
Clear Session And Cookies. Default: true
List of web clips configured for kiosk mode
Web clip policy ID
Display name of the web clip
Auto Distribute Webapp. Default: true
App Name
Identifier
Disable Touch. Default: false
Disable Device Rotation. Default: false
Disable Volume Buttons. Default: false
Disable Ringer Switch. Default: false
Disable Sleep Button. Default: false
Disable Auto Lock. Default: true
Voice Over. Default: false
Zoom. Default: false
Invert Colors. Default: false
Asst Touch. Default: false
Enable Speak Selection. Default: false
Enable Mono Audio. Default: false
Enable Voice Control. Default: false
Show Me Mdm App. Default: true
Kiosk mode type. Allowed values: 1=Single App Kiosk, 2=Multi App Kiosk, 3=Single Web App Kiosk
List of allowed kiosk apps
App ID of the kiosk app. Use the app_group_id from the Apps API response
Display name of the app group
List of autonomous single app mode apps
App ID of the kiosk app. Use the app_group_id from the Apps API response
Display name of the app group
Auto Distribute Apps. Default: false
curl --request POST \
--url https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/applockpolicy \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'Content-Type: application/json' \
--data '{"app_name":"Zylker User","identifier":"value","disable_volume_buttons":false,"disable_ringer_switch":false,"idle_refresh_timeout":-1,"webclippolicies":[{"webclip_policy_id":9007199254741076,"webclip_name":"Zylker Web Clip"}],"clear_session_and_cookies":true,"disable_touch":false,"disable_device_rotation":false,"kiosk_mode":1,"auto_distribute_webapp":true}'Add App Lock payload to the profile
{
"app_name": "Zylker User",
"identifier": "value",
"disable_volume_buttons": false,
"disable_ringer_switch": false,
"idle_refresh_timeout": -1,
"webclippolicies": [
{
"webclip_policy_id": 9007199254741076,
"webclip_name": "Zylker Web Clip"
}
],
"clear_session_and_cookies": true,
"disable_touch": false,
"disable_device_rotation": false,
"kiosk_mode": 1,
"auto_distribute_webapp": true
}
Unique identifier for the created payload item
Idle refresh timeout for web app kiosk in seconds. -1 means disabled. Default: -1
Clear Session And Cookies. Default: true
List of web clips configured for kiosk mode
Web clip policy ID
Display name of the web clip
Auto Distribute Webapp. Default: true
App Name
Identifier
Disable Touch. Default: false
Disable Device Rotation. Default: false
Disable Volume Buttons. Default: false
Disable Ringer Switch. Default: false
Disable Sleep Button. Default: false
Disable Auto Lock. Default: true
Voice Over. Default: false
Zoom. Default: false
Invert Colors. Default: false
Asst Touch. Default: false
Enable Speak Selection. Default: false
Enable Mono Audio. Default: false
Enable Voice Control. Default: false
Show Me Mdm App. Default: true
Kiosk mode type. Allowed values: 1=Single App Kiosk, 2=Multi App Kiosk, 3=Single Web App Kiosk
List of allowed kiosk apps
App ID of the kiosk app. Use the app_group_id from the Apps API response
Display name of the app group
List of autonomous single app mode apps
App ID of the kiosk app. Use the app_group_id from the Apps API response
Display name of the app group
Auto Distribute Apps. Default: false
App Lock payload successfully added
{
"app_name": "Zylker User",
"identifier": "value",
"payload_id": 9007199254741000,
"disable_volume_buttons": false,
"disable_ringer_switch": false,
"idle_refresh_timeout": -1,
"webclippolicies": [
{
"webclip_policy_id": 9007199254741076,
"webclip_name": "Zylker Web Clip"
}
],
"clear_session_and_cookies": true,
"disable_touch": false,
"disable_device_rotation": false,
"kiosk_mode": 1,
"auto_distribute_webapp": true
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.