API access control options