---
schema_version: "1"
id: 6dd91c9c47a2de4cb7d6f16fd41fcf82283bdc6559e0be1da362433491a9181e
title: Apply Open Policies
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/general/exp-governance-policy-library-apply.md
canonical_url: https://docs.mulesoft.com/general/exp-governance-policy-library-apply
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 852d6ab81aa9826014bff9db5eeb9e7c9497c919504e59eedd27a0441cc24a45
description: MuleSoft Documentation Site
latest: true
---
---
product: Getting Started
keywords: policy library, open policies, canonical policies, governance policies, apply policy, policy catalog
---

# Apply Open Policies

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Governance provides two entry points for applying **open policies**: the **Apply Policy** flow on
the Governance Strategies page, and the **Policy Library** on an individual API instance. An open
policy expresses a policy once and applies it as the correct vendor-native policy on each supported
gateway, so you can enforce consistent controls across MuleSoft, Google Apigee, Kong Gateway, and
Azure API Management without authoring a policy per gateway.

This topic covers both entry points and the apply flow. For the full open policy model, the apply
and management workflow, activity tracking, and per-provider support, see
[Managing Policies on Gateway Providers](https://docs.mulesoft.com/general/exp-policies-overview) and
[Open Policies](https://docs.mulesoft.com/general/exp-policies-open).

## Before You Begin

Before getting started, make sure you have:

- An Anypoint Platform account.

- Any of these permissions:

  - API Governance: Governance Administrator

  - API Manager: Manage Policies

- The Organization Administrator role, required to load the open policy catalog, open a policy
  configuration form, and apply an open policy. Without this role, the catalog is empty or those
  actions fail.

  For more information, see [Enhanced Experience Permissions](https://docs.mulesoft.com/general/exp-home-start#permissions).

- API instances registered in the portfolio on a supported gateway.

> [!NOTE] Policy write actions respect your permissions. If you don’t have permission for an action,
> that action is unavailable and the experience explains that the action isn’t permitted. If the
> platform can’t verify your permissions for an instance, the actions remain available and the
> gateway enforces authorization when you submit the request. See
> [Applying and Managing Policies](https://docs.mulesoft.com/general/exp-policies-apply-manage).

## Browse Open Policies

You can start applying an open policy from two places:

- On the Governance Strategies page, select **Add Strategy**, then **Apply Policy**.

- On an API instance, select the **Apply Policy** action to open the Policy Library.

Each policy appears with its name, category, and a short description of what it enforces. You can
filter policies by category:

- **Access and Security**

- **Compliance and Observability**

- **Data Privacy and Integrity**

- **Performance and Cost**

Select **All Domains** to see every policy, or **Custom** to see policies that don’t fall into the
preceding categories. Each filter shows the number of policies it contains.

## Apply an Open Policy

The apply steps vary depending on where you start.

### From the Governance Strategies Page

1.  On the Governance Strategies page, select **Add Strategy**, then **Apply Policy**.

2.  On the **Select Policy** step, select the policy you want to apply.

3.  On the **Configure Policy** step, set the policy parameters. Required and optional fields vary
    by policy type.

4.  On the **Scope** step, choose whether to apply the policy globally or to specific API instances.

5.  On the **Name & Description** step, name the policy. This step appears only when you apply the
    policy globally.

6.  On the **Review** step, review the summary, then apply the policy.

### From an API Instance

1.  On the API instance, select the **Apply Policy** action to open the Policy Library.

2.  On the **Select Policy** step, select the policy you want to apply.

3.  On the **Configure Policy** step, set the policy parameters. Required and optional fields vary
    by policy type.

4.  On the **Select Instances** step, select the API instances where you want to apply the policy.

5.  On the **Review & Apply** step, review the summary, then apply the policy.

When you apply a policy, the platform validates it against your governance configuration and then
creates the corresponding native policy on each selected instance’s gateway.

Applying a policy is an asynchronous, tracked operation, not a fire-and-forget action. When you
apply a policy to more than one instance, each instance reports its own result, so you can see which
instances succeeded and which failed. To confirm the outcome on each target, review the **Activity
log** tab of the instance. See
[Tracking Policy Operations in the Activity Log](https://docs.mulesoft.com/general/exp-policies-activity-log).

For how open policies map to each provider’s native policy, and which policies you can then edit,
enable, disable, or remove afterward, see [Open Policies](https://docs.mulesoft.com/general/exp-policies-open) and
[Applying and Managing Policies](https://docs.mulesoft.com/general/exp-policies-apply-manage).

## See Also

- [Managing Policies on Gateway Providers](https://docs.mulesoft.com/general/exp-policies-overview)

- [Open Policies](https://docs.mulesoft.com/general/exp-policies-open)

- [Applying and Managing Policies](https://docs.mulesoft.com/general/exp-policies-apply-manage)

- [Tracking Policy Operations in the Activity Log](https://docs.mulesoft.com/general/exp-policies-activity-log)

- [Provider Support and Limitations for Policies](https://docs.mulesoft.com/general/exp-policies-provider-reference)

- [Create Governance Strategies](https://docs.mulesoft.com/general/exp-governance-create-strategy)

- [Working with Governance Strategies](https://docs.mulesoft.com/general/exp-governance-work-with-strategies)

- [Viewing Service Details in the Portfolio](https://docs.mulesoft.com/general/exp-services-view-details)
