Provide the Cisco Secure Access Investigate API entitlement at the Medium tier within a Security EA 3.0 environment. It addresses deployments that need the named Investigate API capability as part of their Secure Access service configuration, rather than a networking appliance or endpoint agent. Cisco E3S-SA-INVAPIM-LDR is the orderable code associated with that Medium-level entitlement. The Investigate API designation narrows the service scope to investigation-oriented API access. Keep the Medium tier consistent with the Secure Access service level selected for the organization. The EA 3.0 designation matters because this code belongs to Cisco's Security Enterprise Agreement program family, making it different from standalone physical security products and generic cloud-security subscriptions. Match the entitlement's API focus and Medium tier to the Secure Access capabilities required by the environment. This code is appropriate where the service configuration calls specifically for Investigate API access under the Security EA 3.0 framework. Subscription quantities, term selection, and account-level activation remain dependent on the applicable Cisco agreement configuration.