---
schema_version: "1"
id: 299e84983aeba8b26ae7d82c8974e87bb0c2cc442fbba288283bc4a13fd89ced
title: Resource-Level Policies
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/1.13/policies-resource-level-overview.md
canonical_url: https://docs.mulesoft.com/gateway/1.13/policies-resource-level-overview
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 650e00b70407157fc3b6860be8ba46e259776cc6953a54942fb438225b2b598a
description: MuleSoft Documentation Site
release: "1.13"
latest: false
---
---
product: Omni Gateway
version: 1.13
keywords: policy, custom, ootb, offline, resource level
---

# Resource-Level Policies

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Unless otherwise configured, policies are by default applied to the entire API. However, you can
implement an additional level of policy granularity, one in which access is controlled based on a
criteria. Policies with this granularity are called _resource-level policies_.

At the resource level of granularity, policies are applied to only those requests that match the
criteria. All policies, except the Cross-Origin Resource Sharing (CORS) policy, are resource-level.

For Omni Gateway running in Connected Mode, you configure resource-level policies in API Manager.

For information about configuring resource-level policies for Omni Gateway running in Local Mode,
refer to [Secure an API with an Automated Resource-Level Policy](https://docs.mulesoft.com/gateway/1.13/local-secure-api-with-auto-policy).