diff --git a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs
index 15926b75..73d406e2 100644
--- a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs
+++ b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/CatalogueController.cs
@@ -13,7 +13,7 @@
     /// Catalogue controller.
     /// </summary>
     [Route("Catalogue")]
-    [Authorize]
+    [Authorize(Policy = "AuthorizeOrCallFromLH")]
     [ApiController]
     public class CatalogueController : OpenApiControllerBase
     {
diff --git a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs
index 7e42357d..549f1f80 100644
--- a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs
+++ b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/HierarchyController.cs
@@ -17,7 +17,7 @@
     /// </summary>
     [Route("Hierarchy")]
     [ApiController]
-    [Authorize]
+    [Authorize(Policy = "AuthorizeOrCallFromLH")]
     public class HierarchyController : OpenApiControllerBase
     {
         private readonly IHierarchyService hierarchyService;
diff --git a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs
index 343906d9..b3a685de 100644
--- a/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs
+++ b/OpenAPI/LearningHub.Nhs.OpenApi/Controllers/ResourceController.cs
@@ -28,7 +28,7 @@ namespace LearningHub.NHS.OpenAPI.Controllers
     /// Resource controller.
     /// </summary>
     [Route("Resource")]
-    [Authorize]
+    [Authorize(Policy = "AuthorizeOrCallFromLH")]
     [ApiController]
     public class ResourceController : OpenApiControllerBase
     {