Data 360 Data Governance: Release Impact

About Data 360 Data Governance

Data governance in Data 360 provides a robust framework for securing and managing data through the combined use of tags, classifications, user attributes, and policy-based governance. It helps make sure that the right people can get the right data, at the right time. It also helps with privacy, data security, compliance, size, consistency, and adaptability. 

Impact to Customers 

All customers (whether new or existing) will receive an “Allow All” policy for their Data 360 objects. However, to enable granular control, system admins must create and assign access policies for their users. 

Release Date

The Data Governance features will follow a staggered release starting July 21.  

Policy Types

With data governance in Data 360, you can control access to data by using: Role-based Access Control (RBAC), Attribute-based Access Control (ABAC), or Allow All Access. 

Role-Based Access Control (RBAC)

RBAC allows you to manage data access by assigning permissions to users based on their roles. In Data 360, you can use RBAC to grant access to specific data objects, such as data lake objects (DLOs), data model objects (DMOs), and calculated insight objects (CIOs), within a data space through permission sets. When using RBAC, access is assigned to individual objects. 

Attribute-Based Access Control (ABAC)

ABAC grants or denies access to data based on a combination of attributes belonging to the user and the data. This method provides fine-grained control based on data context. To implement ABAC policies, you'll be required to tag object, field, and rows and assign custom permissions to users.

Allow Access to All Object in Data Space (Based on Data Space Permissions)

If users don’t require granular access control, an Allow All policy grants access based on permission set and data space assignments. The Allow All policy is created by default in Data 360 orgs. It preserves current access behavior based on data space assignment through permission sets, without requiring any action from admins.