Trust
Access control for data
Access control is how a platform enforces who may read, write or share each piece of data. Done well, it lets organisations open data up without losing control.
Common approaches
| Approach | How it works |
|---|---|
| Role-based (RBAC) | Permissions are granted to roles (e.g. analyst, partner) and people get roles. |
| Attribute-based (ABAC) | Rules use attributes of the user, data and context (e.g. region, sensitivity tag). |
| Row-level security | Users see only the rows they are entitled to. |
| Column-level security / masking | Sensitive columns are hidden or masked. |
| Time-limited sharing | Access expires automatically. |
Principles
- Least privilege: grant the minimum needed.
- Grant to groups, not individuals, where possible.
- Make access requests and approvals visible.
- Log and periodically review access.
Work with ex omnia
Contact details for ex omnia will be published here once confirmed.