---
schema_version: "1"
id: 24c903040c0f87294f639372d5a6e886c49372a7cef3d5bf2af03d140c95e474
title: Resource-Level Policies
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/1.9/policies-resource-level-overview.md
canonical_url: https://docs.mulesoft.com/gateway/1.9/policies-resource-level-overview
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 3389f6a47fbde82c86bb02a8dee0b085283f108509dc1344bcc06a8f3a69f6a8
description: MuleSoft Documentation Site
release: "1.9"
latest: false
---
---
product: Omni Gateway
version: 1.9
keywords: policy, custom, ootb, offline, resource level
---

# Resource-Level Policies

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Unless otherwise configured, policies are by default applied to the entire API. However, you can
implement an additional level of policy granularity, one in which access is controlled based on a
criteria. Policies with this granularity are called _resource-level policies_.

At the resource level of granularity, policies are applied to only those requests that match the
criteria. All policies, except the Cross-Origin Resource Sharing (CORS) policy, are resource-level.

For Flex Gateway running in Connected Mode, you configure resource-level policies in API Manager.

For information about configuring resource-level policies for Flex Gateway running in Local Mode,
refer to
[Secure an API with an Automated Resource-Level Policy](https://docs.mulesoft.com/gateway/1.9/flex-local-secure-api-with-auto-policy).