Default Policy Execution Order for Agentforce Gateway

The default policy execution order makes sure that you protect your connections as intended. The execution order is based on the policy type, application method, and timestamp.

Required Editions

See Agentforce Gateway for supported editions.
  • Policy template priority:
    • API connections: Restrictive Access policies take precedence over Quota Management.
    • MCP server connections: MCP Attribute-Based Access Control policies take precedence over MCP Quota Management.
  • Same policy type: If multiple policies of the same type apply, manually applied policies take precedence over rule-based policies.
  • Same application method: If policies have the same type and application method, the one with the latest timestamp takes precedence.

If manual selection and rule methods overlap and apply the same policy to a connection twice, the policy executes only once.

Note
Note You can’t modify the default policy ordering.