--- schema_version: "1" id: bbfeca14c4134682527835dfd77c860a0f9c43a024e017d1ad26b46a19897e5e title: Getting Started with Anypoint API Governance collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/api-governance/get-started.md canonical_url: https://docs.mulesoft.com/api-governance/get-started source_site: docs.mulesoft.com content_type: documentation content_hash: d9b2d196937ccb143c62e9a4627dce03e7cc3f3bd187f553a2776d4108df8ff0 description: MuleSoft Documentation Site latest: true --- --- product: API Governance --- # Getting Started with Anypoint API Governance > For the full documentation index, see: https://docs.mulesoft.com/llms.txt > [!NOTE] We updated the terminology in the API Governance UI to reflect a broader range of asset > types. Where Governance previously used "APIs," it now uses "Services." There are no changes to > functionality. During this transition, you’ll see a mix of the new and previous terms in our > documentation. After you become familiar with the UI and concepts covered in the [Anypoint API Governance Overview](https://docs.mulesoft.com/api-governance/), you’re ready to get started governing your APIs. ## Before You Begin Before you begin using API Governance, see the following sections: - [Verify Your Permissions](#verify-permissions) - [Opt in to Additional Functionality](#opt-in) - [Set Up Third-Party Gateway Connectivity (Optional)](#third-party-gateway-prereqs) ### Verify Your Permissions To use API Governance, you need either _Governance Viewer_ or _Governance Administrator_ permission. - **API Governance** > **Governance Viewer** This permission allows API Governance users, such as API developers and architects, to: - View the Governance console conformance summary. - View the **Governed Services** page with the list of governed services that they have permission to view. - Download a detailed governance report for their APIs in CSV format. - **API Governance** > **Governance Administrator** This permission allows API Governance users, such as API governance and security officers, full access to API Governance. Anypoint Platform organization administrators are allowed full access to API Governance regardless of their API Governance permission settings. Higher level permissions override the **Governance Viewer** permission. If a user has the **Governance Administrator** permission or is an organization administrator, setting the **Governance Viewer** permission for them does not limit their permissions. ### Opt in to Additional Functionality If you’re an administrator and have an opt-in banner in the Governance console, opt in to get additional functionality for your business groups (organizations). See the [API Governance Release Notes entry for October, 17 2023](https://docs.mulesoft.com/release-notes/api-governance/api-governance-release-notes##oct-17-2023). This documentation covers the full product functionality that is available after the opt-in. ### Set Up Third-Party Gateway Connectivity (Optional) If you manage APIs on third-party gateways, connect those providers before you begin governing their APIs. > [!NOTE] Connecting third-party gateway providers is available only in the enhanced MuleSoft > experience. ## Govern Your APIs Govern your APIs using these steps: 1. [Identify](https://docs.mulesoft.com/api-governance/add-tags) APIs to filter for governance by using tags and categories in Exchange. 2. [Configure governance profiles](https://docs.mulesoft.com/api-governance/create-profiles) to identify which rulesets to apply to which APIs. 1. Consider saving your profiles as draft to test settings before revealing their targeted APIs' conformance information across Anypoint Platform. 2. After you test settings using draft profiles, [activate the profiles](https://docs.mulesoft.com/api-governance/create-profiles#activate-draft-profile) to notify developers and reveal the resulting conformance information across Anypoint Platform. 3. [Monitor governance conformance status](https://docs.mulesoft.com/api-governance/monitor-api-conformance) in the Governance console. - View the APIs targeted by each draft profile to assess conformance impacts for that profile and download the associated CSV file report. - View summary information in the Governance console and in validation reports. 4. [Find and fix conformance issues](https://docs.mulesoft.com/api-governance/find-and-fix-conformance-issues): - In API specifications in Anypoint Code Builder, Design Center, and Exchange as you design your APIs - In API instances in API Manager at deployment time - In API catalog information in Exchange asset portal information - In API documentation in Exchange asset portal documentation 5. [(Optional) Create custom rulesets](https://docs.mulesoft.com/api-governance/create-custom-rulesets) to more effectively govern APIs for your business groups (organizations). 6. [(Optional) Install and run CLI commands](https://docs.mulesoft.com/api-governance/cli-command-list) to automate governance as part of your CI/CD pipeline and to more easily create custom rulesets. 7. (Optional) Use the API Governance Experience API to implement custom API-based solutions that access a subset of API Governance functionality. For example, you can use the experience API to list governance profiles and retrieve API conformance status information. Access the experience API in Exchange in your preferred Anypoint Platform control plane: - [US](https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-620025690913/api-governance-xapi) - [EU](https://eu1.anypoint.mulesoft.com/exchange/e0b4a150-f59b-46d4-ad25-5d98f9deb24a/api-governance-xapi) ## Govern Third-Party APIs If your organization runs APIs on third-party gateways, API Governance provides a workflow to connect providers, govern APIs alongside MuleSoft APIs, and export compliance reports. > [!NOTE] The complete workflow for governing third-party APIs is available only in the enhanced > MuleSoft experience. For detailed steps, see > [Govern Third-Party Provider APIs](https://docs.mulesoft.com/general/exp-governance-govern-third-party-apis). ## See Also - [Permissions in Anypoint Platform](https://docs.mulesoft.com/access-management/managing-permissions) - [CLI Commands for API Governance](https://docs.mulesoft.com/api-governance/cli-command-list) - [Anypoint API Governance Overview](https://docs.mulesoft.com/api-governance/)