# Returns the privilege elevation application group and its rules

Returns the privilege application group containing applications configured for privilege elevation, including each rule's appRuleID.

## Endpoint

`GET /dcapi/appctrl/privilegeAppGroup`

## Request URL

`https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/dcapi/appctrl/privilegeAppGroup`

## Scope

`DesktopCentralCloud.AppControl.READ`

## Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Request Headers

- **Accept** (`string`, mandatory): `application/getPrivilegeAppGroup.v1+json`

## Sample Request

### Curl

```curl
curl --request GET \
  --url https://appdomains/dcapi/appctrl/privilegeAppGroup \
  --header 'Accept: application/getPrivilegeAppGroup.v1+json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response Body — `application/json`

- `customerID` (`string`): Customer identifier
- `groupID` (`string`): Unique identifier for the privilege application group
- `createdBy` (`string`): User ID who created the group (-1 for system)
- `modifiedBy` (`string`): User ID who last modified the group (-1 for system)
- `platformID` (`integer`): Platform ID (1=Windows, 2=Mac)
- `appGroupType` (`integer`): Type of application group (4=Privilege)
- `appGroupCategory` (`integer`): Category of the application group (0=Default)
- `description` (`string`): Description of the privilege application group
- `applicationRules` (`JSON Array`): Array of application rules in the privilege group
- `addedRules` (`array`): Array of rules pending addition (empty on GET)
- `removedRules` (`array`): Array of rules pending removal (empty on GET)
- `applicationRuleCount` (`integer`): Total count of application rules in the group
- `associatedCustomGroupCount` (`integer`): Count of custom groups associated with this app group
- `appGroupName` (`string`): Name of the privilege application group (e.g. Default_Privilege_Group)
- `createdTime` (`string`): Creation timestamp in milliseconds since epoch
- `modifiedTime` (`string`): Last modification timestamp in milliseconds since epoch
- `jitRequestMode` (`integer`): JIT request mode (0=Disabled, 1=Enabled, 2=Approval Required)
- `configSpecificAppEnabled` (`boolean`): Whether config-specific app elevation is enabled
- `defaultGroupResource` (`string`): Default group resource (null if not set)
- `clearExistingRules` (`boolean`): Whether existing rules should be cleared
- `manualElevationEnabled` (`boolean`): Whether manual elevation is enabled

## Sample Response: HTTP 200

Privilege application group with application rules

```json
{
  "modifiedTime": "1775480399989",
  "manualElevationEnabled": false,
  "appGroupName": "Default_Privilege_Group",
  "configSpecificAppEnabled": true,
  "groupID": "303",
  "defaultGroupResource": null,
  "description": "",
  "platformID": 1,
  "addedRules": [],
  "clearExistingRules": false,
  "removedRules": [],
  "applicationRules": [
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "906",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Epic Games Inc.",
        "vendorID": "310",
        "vendorName": "Epic Games Inc.",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "907",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Dropbox, Inc",
        "vendorID": "307",
        "vendorName": "Dropbox, Inc",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 1,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "908",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "ZOHO Corporation Private Limited",
        "vendorID": "315",
        "vendorName": "ZOHO Corporation Private Limited",
        "restrictChildElevation": true
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 2,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "909",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "vfghjk",
        "productVendorID": "601",
        "vendorID": "601",
        "vendorName": "ertyui",
        "productName": "vfghjk",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    },
    {
      "appRuleType": 2,
      "trustedUpdater": 0,
      "ruleDetails": {
        "appRuleID": "910",
        "isExisting": true,
        "isVerified": 1,
        "displayName": "Brave Browser",
        "productVendorID": "314",
        "vendorID": "314",
        "vendorName": "Brave Software, Inc.",
        "productName": "Brave Browser",
        "restrictChildElevation": false
      },
      "appRuleName": ""
    }
  ],
  "associatedCustomGroupCount": 0,
  "createdBy": "-1",
  "appGroupType": 4,
  "customerID": "1",
  "jitRequestMode": 0,
  "createdTime": "1774006806321",
  "modifiedBy": "-1",
  "appGroupCategory": 0,
  "applicationRuleCount": 5
}
```

## Rate Limit

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration — Time window for the threshold.  
Threshold — Number of API calls allowed within the specified duration.  
Lock Period — Wait time before consecutive API requests.