---
schema_version: "1"
id: e36b154ef0cb583e25ebbdd5c844a2b674205c42434ff53d99c80a9130fe2bbb
title: Resource-Level Policies
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/latest/policies-resource-level-overview.md
canonical_url: https://docs.mulesoft.com/gateway/latest/policies-resource-level-overview
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 27a324e069f37d23e1f8a1c9cc406673f7970faed3e290556e27f6e3f7e8e0fb
description: MuleSoft Documentation Site
release: "1.14"
latest: true
---
---
product: Omni Gateway
version: 1.14
is-latest-version: true
keywords: policy, custom, ootb, offline, resource level
---

# Resource-Level Policies

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Unless otherwise configured, policies are by default applied to the entire API. However, you can
implement an additional level of policy granularity, one in which access is controlled based on a
criteria. Policies with this granularity are called _resource-level policies_.

At the resource level of granularity, policies are applied to only those requests that match the
criteria. All policies, except the Cross-Origin Resource Sharing (CORS) policy, are resource-level.

For Omni Gateway running in Connected Mode, you configure resource-level policies in API Manager.

For information about configuring resource-level policies for Omni Gateway running in Local Mode,
refer to [Secure an API with an Automated Resource-Level Policy](https://docs.mulesoft.com/gateway/latest/local-secure-api-with-auto-policy).