Author Data Policies

Select classified data, assign supported protection permissions, and save a reviewable Data draft.

Use the Data journey to configure protection for discovered data. Classification scope selects data categories and their applicable discovered locations. Principal scope identifies who receives the configured target permissions. The current authoring lane enables Encryption. Standalone Masking and Filtering choices remain Coming Soon.

Before starting, prepare access and catalog inputs. Use your deployment’s supported principals and native integration. Do not create a policy against invented catalog identities.

To author and verify a Data policy, follow these steps:

  1. Configure scope, principals, and protection.
  2. Save and inspect validation.
  3. Submit the exact saved draft.
  4. Hand off to an authorized reviewer and approver.
  5. Verify Data delivery.

Saving incomplete work does not make it eligible for submission. The current governed revision, which records approved intent, remains unchanged until approval. Draft edits do not replace that revision or prove a change in target protection. Refer to states and revisions.

For a complete worked handoff, follow your first policy.

Configure a Data Policy

Choose discovered classifications, supported principals, Encryption, and explicit Data permissions.

Save and Validate a Data Draft

Persist proposed work, inspect saved findings, and separate Save from submission and approval.

Last modified : November 03, 2026