---
schema_version: "1"
id: 06c6bba181fa81f3d4c8630e1b8db8518e0ac0390a932baf0b190d73cab9f09b
title: Grant Permission to Access an Environment
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/api-manager/latest/environment-permission-task.md
canonical_url: https://docs.mulesoft.com/api-manager/latest/environment-permission-task
source_site: docs.mulesoft.com
content_type: documentation
content_hash: c865e9e9402a521a7a6d1e1c04e89f07f9da81d0b21311b57190e9d3c8ce5a41
description: MuleSoft Documentation Site
release: 2.x
latest: true
---
---
product: API Manager
version: 2.x
is-latest-version: true
---

# Grant Permission to Access an Environment

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

To be able to fully access API Manager operations within an environment, users must have the API
Manager Environment Administrator permission. An API Manager Environment Administrator role is
associated with tasks performed only in API Manager. You can change permissions for API
Manager-related operations from Anypoint Access Management.

Regarding roles, note that:

- Roles and permissions assigned to a user in one particular business group are independent of the
  roles and permissions assigned to that same user in other business groups.

- Roles are business group-specific, so ensure that you are in the correct business group for which
  to manage roles by clicking the menu next to your user icon.

The following diagram illustrates the tasks enabled by having each permission:

![permission relationships](/mulesoft/current/en-us/api-manager/latest/_images/apim-permissions-relationships.png)

In this diagram, note that an Environment Administrator has access to all the functionalities and
permissions. Outer permissions provide permission to the inner permissions. For example,
`Manage Alerts` gives permission to View Alerts and to View API Configuration.

API Manager supports the following additional environment-level permissions:

<table><colgroup><col> <col> <col></colgroup><thead><tr><th>Permission</th><th>Description</th><th>Notes</th></tr></thead><tbody><tr><td><div><div><p>Deploy API Proxies</p></div></div></td><td><div><div><p>Deploy or redeploy an API proxy</p></div></div></td><td><div><div><p>Requires Runtime Manager and Hybrid access. This role enables deployment access from API Manager, but cannot guarantee that deployment is successful due to its dependency on Runtime Manager or Hybrid.</p></div></div></td></tr><tr><td><div><div><p>Manage Alerts</p></div></div></td><td><div><div><p>Create, edit, and delete alerts.</p></div></div></td><td><div></div></td></tr><tr><td><div><div><p>Manage APIs Configuration</p></div></div></td><td><div><div><p>Import APIs from Exchange</p></div></div></td><td><div><div><p>This permission also enables a user to promote an API to another environment, edit the configuration of an API, and delete APIs.</p></div><div><div data-type="NOTE"><div><p>This permission is per environment. API visibility cannot be restricted to specific users inside your organization.</p></div></div></div></div></td></tr><tr><td><div><div><p>Manage Contracts</p></div></div></td><td><div><div><p>Deploy, reject, and revoke contracts</p></div></div></td><td><div><div><p>This permission also gives the user permission over tiers.</p></div></div></td></tr><tr><td><div><div><p>Manage Policies</p></div></div></td><td><div><div><p>Create, edit, delete, enable, disable, and reorder a policy</p></div></div></td><td><div></div></td></tr><tr><td><div><div><p>View Alerts</p></div></div></td><td><div><div><p>List alerts and view configuration summary of an alert</p></div></div></td><td><div></div></td></tr><tr><td><div><div><p>View APIs Configuration</p></div></div></td><td><div><div><p>List and view APIs</p></div></div></td><td><div><div><p>List APIs, view configuration summary of an API, and download proxies.</p></div><div><div data-type="NOTE"><div><p>This permission is per environment. API visibility cannot be restricted to specific users inside your organization.</p></div></div></div></div></td></tr><tr><td><div><div><p>View Contracts</p></div></div></td><td><div><div><p>List contracts and their configuration</p></div></div></td><td><div><div><p>Can also list SLA tiers and their configuration.</p></div></div></td></tr><tr><td><div><div><p>View Policies</p></div></div></td><td><div><div><p>View a listing of policies and view the configuration of a policy</p></div></div></td><td><div></div></td></tr></tbody></table>

## Grant Permissions

To grant environment permissions to roles from API Manager:

1.  **Click Access Management** > **Users** > **_a user to give permissions_** > **API Manager** >
    Permissions.

2.  Select the permissions for the user and click ![blue plus icon](/mulesoft/current/en-us/api-manager/latest/_images/blue-plus.png) to save
    the permissions:

![How to set permissions in Access Management](/mulesoft/current/en-us/api-manager/latest/_images/apim-user-perms.png)

> [!NOTE] The following API Manager 1.x roles are incompatible with API Manager 2.x:
>
> - API Versions Owner
>
> - API Creator
>
> - Portals Viewer

## See Also

- [Promote an API instance to another Environment](https://docs.mulesoft.com/api-manager/latest/promote-api-task)