Manage User Roles and Privileges > Managing data access rules > Limits on data access rules

Limits on data access rules

You can create and publish up to 50 record-level and 50 attribute-level data access rules for a business entity. The maximum limit includes both published and draft data access rules.

For example, consider that the Person business entity already has 50 record-level and 50 attribute-level data access rules. Out of the 50 record-level data access rules, 30 are published and 20 are in the draft state.

Consider the following rules and guidelines when you create or publish data access rules for the business entity:

•You can't create record-level and attribute-level data access rules because the business entity has exceeded the maximum limit of 50 record-level and 50 attribute-level data access rules.
•You can update the existing published and draft data access rules in the business entity.
•You can publish the 20 draft record-level data access rules for the business entity.
•After you publish the 20 draft record-level data access rules, you can update the existing 50 record-level data access rules and publish them.

If you modify the rule type of an existing record-level data access rule to attribute-level data access rule, the rule moves to the draft state. However, you can't publish the draft data access rules because the business entity exceeds the maximum limit of 50 attribute-level data access rules.

•You can update the existing 50 attribute-level data access rules and publish them.

If an existing business entity has more than 50 record-level and 50 attribute-level rules, you can no longer create data access rules for the business entity.

Additionally, when you import the authorization asset, if the data access rule names in the asset from the source organization match the rule names in the target organization, MDM SaaS ignores the maximum limit and overwrites the existing data access rules in the target organization.

If the asset that you import contains new data access rules, MDM SaaS checks the maximum limit for each business entity in the target organization. If the maximum limit exceeds, the import of the asset fails.