Govern
Access Design
Design least-privilege grants, row filters, and column masks around real usage patterns.
Use this guide when you want to make access both safe and usable.
Inputs
- the principal or group
- the target object or product
- row-level and column-level protection requirements
Flow
- start with the product or object the user should reach
- grant the minimum privilege required
- add row filters where visibility depends on tenant, geography, or audience
- add column masks where exposure should be transformed rather than denied
- document the request path when access needs human approval
Verification Criteria
- the principal can reach only the intended objects
- restricted rows stay out of the result set
- sensitive fields do not leak raw values