--- schema_version: "1" id: 4bcf025eb9ff04053718bf3bbf034674032bea938bb45f77eb8b11f35265f77a title: Create Governance Strategies collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/general/exp-governance-create-strategy.md canonical_url: https://docs.mulesoft.com/general/exp-governance-create-strategy source_site: docs.mulesoft.com content_type: documentation content_hash: fb1d1702922869bdfbefc59d2403bdc9c112e2d1ebe240d9344d383d461c5b06 description: MuleSoft Documentation Site latest: true --- --- product: Getting Started keywords: governance strategies, create strategy, strategy workflow, governance scope, strategy type, api governance, mulesoft --- # Create Governance Strategies > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Governance strategies define which services the system evaluates or enforces policy against and under what conditions. A Control strategy monitors compliance and can block noncompliant activity. An Automated Policy strategy enforces requirements at the gateway or runtime layer. You can create strategies if your tenant includes **Governance** and you have the required administrator role. > [!NOTE] Automate strategy creation using the MuleSoft MCP Platform Server. For details, see > [create\_guardrail](https://docs.mulesoft.com/mulesoft-mcp-server/reference-mcp-tools-platform#create-guardrail) and > [create\_automated\_policy\_strategy](https://docs.mulesoft.com/mulesoft-mcp-server/reference-mcp-tools-platform#create-automated-policy-strategy) > in the MuleSoft MCP Platform Server Tool Reference. ## Before You Begin Before getting started, make sure you have: - An Anypoint Platform account. - Any of these permissions: - API Governance: Governance Administrator - API Manager: Manage Policies For more information, see [Enhanced Experience Permissions](https://docs.mulesoft.com/general/exp-home-start#permissions). Also decide whether you need validation-only monitoring or active runtime enforcement. This choice determines the strategy type and the rules or policies to apply. ## Open the Strategy Workflow 1. Log in and go to **Governance** > **Governance Strategies**. 2. Select **Create Governance Strategy** to start the setup flow. The setup flow guides you through these steps: **Strategy Type**, **Scope**, **What to Apply**, **Name & Description**, and **Review**. ## Select Strategy Type Select from these types: - **Control** validates targeted services against control rules. Use controls to monitor compliance and, when supported, block noncompliant activity. - **Automated Policy** enforces runtime policy requirements across targeted services. Select the type that matches your governance objective, then proceed. ## Define Governance Scope Configure scope criteria to identify the services that the strategy governs. All criteria are combined to narrow the scope. Set these filters: **Service Type** Select one or more service types to govern. **Tags** Select tags to include only services that match those tags. **Categories** Select categories to further narrow the scope. **Instances** Filter by instance status: - **All APIs**: Include all matching services regardless of instance status. - **Include only APIs with instances**: Include only services that have at least one associated instance. - **Only APIs without instances**: Include only services with no associated instances. Use **Preview Governed Scope** to see which services currently match your criteria before you move forward. ## Configure Controls or Policies In the enhanced experience, your existing Anypoint profiles appear as controls. Controls offer expanded capabilities, such as governing new services and providing rules to control service and AI state behavior. Depending on the strategy type, select the controls or policies the strategy enforces: - For **Controls**, select controls from the catalog available in your tenant. - For **Automated Policy**, define runtime details such as gateway runtime, endpoint type, and environment. Available options depend on your earlier selections and your organization’s enabled products. ## General Information Enter a clear **Strategy Name**, such as "PCI Compliance Rules." Add a **Description** that states what the strategy enforces and why. ## Review and Activate Review your selections: strategy type, scope, rules or policies, and general information. Select **Create and Activate Strategy**. Strategies are active by default. To disable a strategy, go to **Governance Strategies**. ## After Strategy Activation - The system evaluates services that match the scope against the rules or policies in the strategy. - For **Controls**, compliance status appears in conformance reports. - For **Automated Policy**, enforcement runs at the gateway or runtime layer. - Edit the strategy from **Governance Strategies** when scope, rules, or naming change. Work with your governance lead if strategies affect production services or if rollout timing requires coordination. ## Create Governance Strategies with Your IDE You can also author governance strategies from your IDE by using locally installable developer skills. With skills, you define governance rulesets as code, which is useful for version control, reuse, and collaboration. Some rule types are available only through IDE skills. For example, you can’t configure control rules that track third-party provider policy subcategories in the UI. To create these rules, use a prompt such as `create a rule to track that each API has a JWT policy applied to it`. For step-by-step guidance on authoring rulesets from your IDE, see the [Author a Governance Ruleset](https://dev-portal.mulesoft.com/skills/author-governance-ruleset.html) skill in the MuleSoft Developer Hub. ## See Also - [Working with Governance Strategies](https://docs.mulesoft.com/general/exp-governance-work-with-strategies) - [Managing Governance Strategies](https://docs.mulesoft.com/general/exp-governance-manage-strategies) - [Managing Costs and Token Usage](https://docs.mulesoft.com/general/exp-governance-view-cost-and-token-usage) - [Viewing Service Details in the Portfolio](https://docs.mulesoft.com/general/exp-services-view-details)