Access Profiles
An Access Profile specifies a collection of permissions that can be applied to multiple users. Each user is assigned an Access Profile, which can be shared by other users.
Users who have the required access privileges under
Settings 
> Access Profiles > Administrative Permissions > User and Ownership Controls can edit the Access Profiles information.
An Access Profile specifies:
The network locations (IP addresses) from where it is possible to login.
Administrative permissions.
Container user groups
API Management permissions
The default Access Profiles are:
Administrator, which provides permissions needed by the System Administrator.
Regular User, which provides permissions that are more appropriate for normal users.
API Gateway Administrators - By default, all API Management permissions are assigned to the Administrators access profile and these privileges cannot be modified.
API Gateway Providers - By default, the following permissions are assigned to the API Gateway Providers access profile and these privileges cannot be modified:
Manage APIs
Manage Applications
Manage policy templates
Manage packages and plans
Publish to API Portal
Export assets
Execute service result cache APIs
Activate/Deactivate APIs/Packages
Manage aliases
Import assets
API Portal Administrators - The API Portal Administrator can perform all the functions in API Portal.
API Portal Providers - The API Portal Provider can manage APIs and packages in API Portal.
Note: You can create and manage API Management Access Profiles provided you have the required API Gateway Cloud and/or API Portal Cloud licenses.
By default, the system administrator can change the Administrative Permissions associated with each Access Profile and can add additional Access Profiles, as needed.
To edit an existing Access Profile, select the profile and click Edit. To delete an Access Profile, select the profile and click Delete. You will not be able to delete an Access Profile if it is used by a user. To create a new Access Profile, click Add New Access Profile.
Note: The Access Profile ID is needed while configuring Single Sign-On (SSO). You have to provide the ID while configuring the Identity Provider (IDP), if you want to create a user if the user is not present. The newly created user will be associated with the Access Profile represented by the ID sent by the IDP in the SAML Response. The name of the SAML attribute that designates the user's access profile must contain the ID of the Access Profile.
Related Topics