Which permissions grant authority to approve or reject API access requests?

• A. "Security Administrator" only
• B. "View User" and "Edit Roles"
• C. "API Manager Global Administrator" only
• D. "Organization Administrator", "API Manager Environment Administrator", or "Manage Contracts"

Answer: (D)

Approving or rejecting API access requests is a governance function tied to who can manage contracts and oversee API access. The Organization Administrator role provides broad, organization-wide control, including managing access and contracts. The API Manager Environment Administrator role gives authority within a specific environment to manage APIs and their access. The explicit Manage Contracts permission directly handles access agreements and decisions on approvals or denials. Any of these permissions enables you to authorize or deny requests for API access. Other roles like Security Administrator or roles that only view users or edit roles don’t necessarily confer contract management or environment-wide API governance, so they don’t suffice for approving or rejecting access requests.