If a user has View permission on an API and Create Assets permission within their own organization, he or she can virtualize the particular API. However, the user will not be permitted to configure the run-time actions for the API that is virtualized unless he or she also has the API Runtime Provider role. Only users with API Runtime Provider role can configure these run-time actions. Similarly, the user will not be permitted to publish the virtual API to a gateway or an API-Portal, unless he or she has the API Publisher role or the API-Portal Administrator role, as appropriate.