To select all the listed functional controls.

To create and manage APIs.

To activate, deactivate and manage APIs.

To create and manage applications and register applications with the APIs. You cannot modify or delete an application if you are not the owner of the application.

To create and manage aliases.

To apply a global policy to all APIs or the selected set of APIs.

To activate, deactivate, and manage global policies.

To apply one or more policy templates to an API.

To prevent malicious attacks on applications that typically involve large, recursive payloads, and SQL injections.

To publish and unpublish APIs to service registry.

To create packages and plans, associate a plan with a package, and associate APIs with a package. In addition, you can view the list of packages, package details, APIs, and plans associated with the package.

To activate, deactivate, and manage packages.

To publish and unpublish assets to API Gateway.

To view administration configurations.

To create and manage administration configurations.

To create and manage security configurations.

To execute service result cache API.

To publish events and performance metrics data to the configured destinations.

To create and manage system settings.

To create and manage users.

To create stages and manage promotions.

To create and manage service registries

To change ownership of an asset or teams.

To manage OAuth and OpenID scopes.

To export assets to your local system.

To purge and restore events from the API Gateway store by setting the required date or duration in the API Gateway.

To manage the Microgateways connected to the API Gateway instance.