{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40396,"path":"platform-security/authentication/api-access-policy.md","title":"API access policy","bundle":null,"doc_type":null,"release":"australia","body":"\n# API access policy\n\nAPI access policy defines the permissions and duration of access to an API.\n\nAPI access policy enables you to restrict access to inbound ServiceNow® APIs based on the authentication type and the specified filter criteria of the access policy.\n\nFollowing are the three level auth policy support for the non-interactive sessions:\n\n-   **REST API**: Admin can define a global API auth policy or API specific auth policy.\n-   **SOAP API**: Admin can define a global API auth policy or API specific auth policy.\n-   **System/Export Processor**: Admin can define five base system auth profiles, which can be used to apply auth profile to processors API auth policy or processor specific auth policy.\n\n**Note:** If you add a global auth policy, then the policy applies for all the REST APIs, SOAP APIs, or System/Export Processors.\n\nFollowing are the plugins auto-installed for API policies and authentication scope:\n\n-   com.glide.rest.policy\n-   com.glide.soap.policy\n-   com.glide.processor.policy\n-   com.glide.rest.auth.scope\n\nYou can configure the default Global Blocking Policy or create a custom API access policy according to your security requirements. And apply filter criteria that contain filter conditions or queries that are used as policy inputs for an authentication policy.\n\nThe following API access policies are supported in ServiceNow®:\n\n-   [REST API access policies](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/inbound-authentication-profile.md)\n-   [SOAP API access policies](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/soap-api-access-policies.md)\n\nFor information about policies related to export processors, see [Access policy for System or Export Processors](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/api-auth-policy-export-processors.md).\n\n"}}