Retrieves the full details of a Java Rules Manager profile and its payload configurations.
get /bsp/api/v1/bmp/jrm/{jrm_profile_id}
https://{server-hostname}:8383/bsp/api/v1/bmp/jrm/{jrm_profile_id}
BrowserManager.READCopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
JRM Profile ID from List JRM Profiles response (jrm_profile_id field)
curl --request GET \
--url https://appdomain/bsp/api/v1/bmp/jrm/{jrm_profile_id} \
--header 'Accept: application/json' \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52'Full JRM profile with all payload rule details
Unique profile ID use as {jrm_profile_id} in other APIs
Name of this JRM profile
Description of what this profile is for
Always '64012' identifies this as a Java Rules Manager profile
Target platform: '1' = Windows, '2' = Mac, '-1' = All platforms
Current version number of the profile
Published version number, or '--' if never published
Internal collection ID grouping profile versions
Whether this profile is in the trash
Profile scope '0' means default scope
All payload configurations with their URL/group rules, block messages, and Java version settings
Complete payload configuration with all Java rules
Configuration label (always 'JAVA_RULES_MANAGER')
Always '64101' identifies this as a Java Rules Manager payload
Custom message displayed to users when Java is blocked (action=0). Empty string if action is not Block or no custom message is set
List of rule sets each contains URL-based rules and/or group-based rules. The 'config_data_item_id' in each item is used as {jrm_payload_id} for Modify/Delete Payload APIs
Individual rule set with URL and group rules
Unique ID for this rule set use as {jrm_payload_id} in Modify Payload (PUT) API
URL-based rules each entry controls Java behavior for a specific website
Java rule for a specific website URL
Webdomain ID (references a site configured in Browser Security > Web Domain Management)
The website URL/domain name (read-only, set when the webdomain was created)
What to do with Java on this site: '0' = Block Java entirely, '1' = Allow Java to run, '2' = Use browser's default Java setting
When action is '1' (Allow), specifies the required Java version (e.g., '1.7.0_04'). Leave empty to allow any installed version
Group-based rules each entry controls Java behavior for a group of websites
Java rule for a webdomain group
Webdomain group ID (references a group configured in Browser Security > Web Domain Management)
Name of the webdomain group (read-only, set when the group was created)
What to do with Java for all sites in this group: '0' = Block Java, '1' = Allow Java, '2' = Use browser default
When action is '1' (Allow), specifies the required Java version. Leave empty to allow any installed version
Whether default Rich Internet Application (RIA) settings are applied
Error identifier (e.g., 'IAM0006' for invalid field value)
Describes which field or value is invalid
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Forbidden error code returned when the authenticated user does not have the required uem-roles (e.g., DataEncryption_Admin or DataEncryptionRecoveryKey_Admin)
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call threshold (configured via threshold/duration in security XML) is exceeded; client is locked out for lock-period minutes
Rate limit exceeded message with retry guidance
Description of the server-side error
Profile with URL payload
{
"collection_id": "222",
"profile_name": "Corporate Java Rules",
"profile_type": "64012",
"platform_type": "1",
"latest_version": "1",
"is_moved_to_trash": false,
"payloads": [
{
"config_name": "JAVA_RULES_MANAGER",
"payload_type": "64101",
"block_message": "Java applet blocked by policy",
"jrm_details": [
{
"config_data_item_id": "946",
"urls": [
{
"java_version": "1.7.0_04",
"action": "1",
"id": "3",
"url": "localhost"
}
],
"groups": []
}
],
"default_rias": false
}
],
"profile_id": "111",
"scope": "0",
"latest_published_version": "--",
"profile_description": "Java applet rules for corporate sites"
}
Invalid profile ID
{
"errorcode": "IAM0003",
"errormsg": "Invalid request."
}
Unauthorized
{
"errorCode": "IAM0001",
"errorMsg": "Authentication key is invalid. Please regenerate the key and try again."
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"errormsg": "Internal Server error, Please try again in a moment."
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.