changed management API access policy