We are working on a set of APIs that would be exposed to the external customers, for that we are implementing the Azure APIM and Developer Portal which would allow the customers to explore and help them integrate the APIs into their system.

The setup we are thinking is as follows

1. Customers should be able to manage their profile, subscriptions, etc.
2. They should be able to call our Sandbox APIs using Try It feature.
3. They should not be able to call the Production APIs from Try It but they should be able to create subscription for production API.

Now, this requirement seems pretty standard because nobody would want to allow developers to call the Production APIs accidently.

I have gone through a lot of resources around this but could not find any concrete solution.

The part that is most problematic is how to setup the Sandbox and Production urls in the same APIM.