# Prisma Browser Management API > One REST API to manage and safely roll out everything you configure in the Prisma Browser console. > The guide pages below teach the workflows and name only a few controls and fields as examples. The OpenAPI specification at https://pan.dev/spec/prisma-browser-management.yaml is the authoritative, current catalog of every endpoint, control, field and enum value, so consult it before concluding that something does not exist. > Generated: 2026-09-18 16:27 UTC ## Start here - [Prisma Browser API: Developer Guide](https://pan.dev/prisma-browser/guide/guide-overview): The guide home, recommended reading order, API basics, and conventions - [Getting started](https://pan.dev/prisma-browser/guide/getting-started): Authenticate, read access-and-data rules, create a test app, publish, and clean up ## Basics - [Authentication](https://pan.dev/prisma-browser/guide/authentication): OAuth2 client credentials, token scope, and service-account roles - [Draft and publish](https://pan.dev/prisma-browser/guide/draft-and-publish): Draft vs active configuration, publishing, partial publish, and safe rollout patterns - [Direct actions](https://pan.dev/prisma-browser/guide/direct-actions): Immediate user and device actions outside draft publishing - [Delta patch](https://pan.dev/prisma-browser/guide/delta-patch): Add and remove list values without read-modify-write races - [Pagination](https://pan.dev/prisma-browser/guide/pagination): Cursor pagination and the pageInfo response envelope - [Errors](https://pan.dev/prisma-browser/guide/errors): Error response shape and common troubleshooting patterns ## Inventory - [Users](https://pan.dev/prisma-browser/guide/users): List, filter, and read the users observed in your tenant - [Devices](https://pan.dev/prisma-browser/guide/devices): List, filter by posture, and read the devices observed in your tenant ## Policy objects - [Applications](https://pan.dev/prisma-browser/guide/applications): What applications are, the types, and the operations shared across them - [Application catalog](https://pan.dev/prisma-browser/guide/applications-catalog): Browse and reference read-only SaaS apps from the Universal Application Directory - [Custom applications](https://pan.dev/prisma-browser/guide/applications-custom): Define a SaaS or web application by its URLs - [Private applications](https://pan.dev/prisma-browser/guide/applications-private): Define an internal application routed through Prisma Access - [Non-web applications](https://pan.dev/prisma-browser/guide/applications-non-web): Define an RDP or SSH remote connection by address, protocol, and port - [Desktop applications](https://pan.dev/prisma-browser/guide/applications-desktop): Define a local desktop application by its executables, or reference one from the curated catalog - [Application groups](https://pan.dev/prisma-browser/guide/application-groups): Named bundle of applications that rules reference - [User groups](https://pan.dev/prisma-browser/guide/user-groups): Local and IdP-synced user groups for rule scope - [Device groups](https://pan.dev/prisma-browser/guide/device-groups): Device posture groups and membership criteria ## Policy - [Policy](https://pan.dev/prisma-browser/guide/rules): Policy structure, rules, sections, actions, controls, and scope - [Sign-in rules](https://pan.dev/prisma-browser/guide/sign-in-rules): Sign-in rule fields and structure - [Access and data rules](https://pan.dev/prisma-browser/guide/access-and-data-rules): Access, login, data, and DLP controls on access-and-data rules - [Security rules](https://pan.dev/prisma-browser/guide/security-rules): Harden the Prisma Browser with extension, cookie, and certificate controls - [Customization rules](https://pan.dev/prisma-browser/guide/customization-rules): Brand the Prisma Browser with logo, theme, shortcuts, and start pages - [Assets](https://pan.dev/prisma-browser/guide/assets): Upload logos, icons, images, and PAC files, then reference them by ID ## User requests - [User requests](https://pan.dev/prisma-browser/guide/user-requests): List, approve, decline, and revoke admin-approval requests ## Use cases - [Create and publish a rule](https://pan.dev/prisma-browser/guide/create-and-publish-a-security-rule): Create, verify, and publish a security rule - [Govern URLs with an allow/block list](https://pan.dev/prisma-browser/guide/manage-allow-block-list): Govern URLs with an allow or block list - [Publish a single object (partial publish)](https://pan.dev/prisma-browser/guide/automate-with-partial-publish): Edit one object and publish only that object - [Suspend a compromised user](https://pan.dev/prisma-browser/guide/suspend-a-compromised-user): Suspend a user immediately for incident response or offboarding - [Change a rule's scope](https://pan.dev/prisma-browser/guide/change-a-rule-scope): Change who a rule applies to - [Manage login and data controls](https://pan.dev/prisma-browser/guide/manage-login-and-data-controls): Configure login and data controls on access-and-data rules - [Quarantine a lost or compromised device](https://pan.dev/prisma-browser/guide/quarantine-a-device): Suspend, archive, or remove a lost or compromised device - [Configure cloud storage and rotate credentials with no downtime](https://pan.dev/prisma-browser/guide/rotate-cloud-storage-credentials): Rotate cloud storage credentials without downtime - [Reorder rules and sections](https://pan.dev/prisma-browser/guide/reorder-rules-and-sections): Reorder rules and sections safely - [Set a DLP profile on a rule](https://pan.dev/prisma-browser/guide/set-a-dlp-profile): Discover and attach Enterprise DLP profiles - [Bulk-sync a rule's applications](https://pan.dev/prisma-browser/guide/bulk-update-rule-applications-with-delta): Sync a rule application list from automation - [Manage allowed browser extensions](https://pan.dev/prisma-browser/guide/manage-allowed-extensions): Manage the allowed browser extension list - [Add or remove users on a rule](https://pan.dev/prisma-browser/guide/manage-users-on-a-rule): Add or remove users directly or through groups - [Handle user access requests](https://pan.dev/prisma-browser/guide/handle-user-access-requests): Poll, approve, decline, and revoke access requests - [Require an IdP authentication factor](https://pan.dev/prisma-browser/guide/require-idp-authentication-factor): Enforce an identity provider authentication factor with a Cloud Identity Engine profile - [Roll out a rule gradually](https://pan.dev/prisma-browser/guide/gradual-rollout-with-user-group): Roll out policy gradually with user groups ## API reference - [OpenAPI specification](https://pan.dev/spec/prisma-browser-management.yaml): Every endpoint, request and response field, enum and validation rule. The guides do not enumerate all fields, so load this for anything the guide pages leave out. - [Endpoint reference](https://pan.dev/prisma-browser/api/list-users): The same specification rendered page by page, one page per endpoint. ## Full text - [Full guide (single Markdown file)](https://pan.dev/prisma-browser/llms-full.txt): Every guide page concatenated for LLM ingestion.