---
title: "Gravitee API Manager as Advanced API Manager in Platform"
canonical: "https://onesaitplatform.refined.site/space/DOCT/2220197390/Gravitee%20API%20Manager%20as%20Advanced%20API%20Manager%20in%20Platform"
format: markdown
---
> Macro (toc)

## Introduction

The Onesait Platform has integrated **[Gravitee](https://gravitee.io/)**[ ](https://gravitee.io/)as an API Manager solution where advanced API Manager capabilities are needed.

This integration is part of the Enterprise version and coexists with the basic API Manager, with which it is integrated. 

This new integration will allow us creating APIs through the platform in the same way we have been doing, but with an extra option to publish them in Gravitee's Gateway.

## Capabilities

The main advantages provided by Gravitee to the Platform are these:

- Easy API management and administration (life cycle, subscription plans, etc.) through the offered UI.
- Analytics, API use statistics, logs, etc... These data are stored in ElasticSearch.
- Easy implementation of rules and policies for each API, security, throttling control (even different ones for each endpoint in the same API).
- In the future, it will ease Freemium model implementation in the platform's APIs.

The APIS that are published in Gravitee are directly attacked through the Gravitee Management Gateway. This means that, for APIs that are external to the platform, the request never go through any of our microservices; however, for APIs on ontologies, our API Manager will still be used - only after going through Gravitee.

## Publishing an API in Gravitee

We will now detail the API creation and publication process in Gravitee. There is nevertheless a [videoguide](https://www.youtube.com/watch?v=o6sEDhH4YzU&t=214s) in our YouTube channel with the full process, in more detail.

When creating an API from the platform, you will see a checkbox that will allow you to publish it in Gravitee.

![image](media://f51afce1-52e6-45a9-afe6-9f394708bf57)


Once created, in the APIs list, you will see a new icon with the Gravitee logo, where you are allowed to browse to three different links:


![image](media://a0088334-e9df-4c51-ad0f-d1f9d375cc7b)


Besides, if you enter any API published in Gravitee, you will see that the endpoint shows another URL that does not belong to our API Manager. It is the Gravitee Gateway URL:

![image](media://333aefcf-bc87-4b61-870f-a5de159cf9b3)

The three previously-mentioned links offer us:

- **Analytics**: Integrated view of our API's analytic UI. From here you can see access logs, response codes, more demanded paths, etc.

![image](media://799fad80-b509-4265-b716-e6dc3cfe659b)


- **Policies**: Integrated view of the UI to manage rules and policies. From here you can add different policies to your API.

![image](media://d8afb21e-7e69-42e6-a5ab-9d3d4fc087e0)


- **Gravitee UI:** This link, available only to admins, takes you to a new tab with Gravitee's complete interface to perform management tasks, see every APIs' statistics, etc.

![image](media://ffe018c0-6710-4fc4-aae8-e224234c667b)

## Security and authentication in Gravitee

Authentication and authorisation in Gravitee are achieved through our Oauth2 Server, following the SSO model. That way, the platform roles will be mapped according to Gravitee roles.

| **Gravitee Role** | **Platform Roles** |
| --- | --- |
| USER (API_CONSUMER) | USER |
| API_PUBLISHER | DEVELOPER |
| ADMIN | ADMINISTRATOR, ANALYTICS |

The specific documentation for the Gravitee-supported functionalities can be found at: [https://docs.gravitee.io/](https://docs.gravitee.io/)