---
schema_version: "1"
id: fcf6897d08fc6beaf72bb3b637e37a1c6552104a8defd3cea8fe2f59902ada46
title: Managing Policies on Gateway Providers
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/general/exp-policies-overview.md
canonical_url: https://docs.mulesoft.com/general/exp-policies-overview
source_site: docs.mulesoft.com
content_type: documentation
content_hash: d64f819cc5e30ba3d0dc1506f74f64aa579e6c4a317d48a61d082c07b90dcebb
description: MuleSoft Documentation Site
latest: true
---
---
product: Getting Started
keywords: policies, gateway policies, external gateways, apigee, azure api management, kong, api manager, anypoint platform
---

# Managing Policies on Gateway Providers

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Manage policies not only on Omni and Mule gateways but on external gateway providers, such as Google
Apigee, Azure API Management, and Kong Gateway. You work with these policies entirely through the
enhanced MuleSoft experience, from the **Policies** tab of an API instance in **Portfolio**.

## Before You Begin

Before getting started, make sure you have:

- An Anypoint Platform account.

- The API Manager: Manage Policies permission to apply, edit, enable, disable, or remove policies.

- The Organization Administrator role to apply open policies, or to apply, edit, enable, disable, or
  remove native policies on external gateways. Without this role, you can’t load an open policy
  catalog, open a policy configuration form, apply an open policy, or apply, edit, enable, disable,
  or remove native policies on an external gateway. Listing native policy templates on an external
  gateway still uses the View Policies permission.

  For more information, see [Enhanced Experience Permissions](https://docs.mulesoft.com/general/exp-home-start#permissions).

- A provider scanner already connected for each external provider whose policies you want to manage.
  Policy management reuses the same connection you set up for scanning. See
  [Adding Scanners from Providers](https://docs.mulesoft.com/general/exp-scanners-add-from-providers).

## Reading Policies vs. Writing Policies

There are two distinct ways you interact with provider policies:

- Read (discover and display): Provider scanners import the full catalog of policies attached on the
  provider so you can see them on the **Policies** tab. This is view-only. See
  [View Read Policies Discovered by Scanners](https://docs.mulesoft.com/general/exp-services-view-details#view-read-policies-discovered-by-scanners).

- Write (create, edit, enable, disable, remove): From the same **Policies** tab, you can manage a
  curated subset of policies directly on the provider. This is the feature described in this
  section.

## The Editability Rule

The enhanced MuleSoft experience recognizes and displays every policy it discovers, but you can
create and edit only a curated set: the policies that back the open use cases, plus several
additional native Kong policies. See [Open Policies](https://docs.mulesoft.com/general/exp-policies-open). Other recognized policies
are view-only.

You can remove, enable, and disable policies more broadly than you can edit them, so it’s normal to
see a policy where **Edit Configuration** is unavailable while **Remove Policy** and the enable and
disable actions remain available, as long as the provider supports that action. See
[Applying and Managing Policies](https://docs.mulesoft.com/general/exp-policies-apply-manage) and
[Provider Support and Limitations for Policies](https://docs.mulesoft.com/general/exp-policies-provider-reference).

## How Policy Operations Work

Every policy change on an external provider, such as apply, edit, enable, disable, or remove, runs
asynchronously: the enhanced MuleSoft experience accepts the request and performs the work on the
provider in the background. Because an accepted request isn’t the same as an applied policy, confirm
the outcome in the Activity log tab for the API instance. See
[Tracking Policy Operations in the Activity Log](https://docs.mulesoft.com/general/exp-policies-activity-log).

## See Also

- [Open Policies](https://docs.mulesoft.com/general/exp-policies-open)

- [Applying and Managing Policies](https://docs.mulesoft.com/general/exp-policies-apply-manage)

- [Tracking Policy Operations in the Activity Log](https://docs.mulesoft.com/general/exp-policies-activity-log)

- [Provider Support and Limitations for Policies](https://docs.mulesoft.com/general/exp-policies-provider-reference)

- [Viewing Service Details in the Portfolio](https://docs.mulesoft.com/general/exp-services-view-details)

- [Adding Scanners from Providers](https://docs.mulesoft.com/general/exp-scanners-add-from-providers)