The core of my question is when I create a REST API access policy.
When and under what conditions does this become active?
When and how are the configured REST API Access Policies activated?
When you use the normal IP Address Access Controls table.
In my opinion, this is the measure of all things.
If you do not use this table and switch to SSO Authentic Scheme in the Adaptive Authentication context, for example, you need an extra solution for accessing the instance with APIs.
or can you say, as soon as I have an Active REST API Access Policy, you can only use this API if this policy determines true.
