A data access policy is a set of rules that you can use to protect data and control access to your data. For example, you can write a data access policy around a regulation such as HIPAA or GDPR, or around a business objective such as provisioning data for marketing analytics.
As a Data Steward, you can create data access control policies, data filter policies, and data de-identification policies on the Data Access Management page.
The following image shows the Data Access Management page where you start to define data access policies:
You use data access control policies to grant read, write, or delete access to specific technical assets, including tables, views, and so on in a specified source system.
You use data filter policies to filter out records that Data Consumers should not access due to their role or location.
You use data de-identification policies to remove, alter, or otherwise protect the columns and values in each data asset that the given user can access. Each data de-identification policy contains one or more data de-identification rules, which contain data protections that define which data de-identification techniques to apply to the data.