---
schema_version: "1"
id: 25288a6d4815be0cec8fa686459636b0914f6681a76db530bdfa3dab4786ff8d
title: Resource-Level Policies
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/1.12/policies-resource-level-overview.md
canonical_url: https://docs.mulesoft.com/gateway/1.12/policies-resource-level-overview
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 28f98fbc151a08235786d1c9738697f6dc045a0cb6cd60ecfbf615a5348ec29f
description: MuleSoft Documentation Site
release: "1.12"
latest: false
---
---
product: Omni Gateway
version: 1.12
keywords: policy, custom, ootb, offline, resource level
---

# Resource-Level Policies

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Unless otherwise configured, policies are by default applied to the entire API. However, you can
implement an additional level of policy granularity, one in which access is controlled based on a
criteria. Policies with this granularity are called _resource-level policies_.

At the resource level of granularity, policies are applied to only those requests that match the
criteria. All policies, except the Cross-Origin Resource Sharing (CORS) policy, are resource-level.

For Flex Gateway running in Connected Mode, you configure resource-level policies in API Manager.

For information about configuring resource-level policies for Flex Gateway running in Local Mode,
refer to
[Secure an API with an Automated Resource-Level Policy](https://docs.mulesoft.com/gateway/1.12/flex-local-secure-api-with-auto-policy).