Policy Authoring Procedures

Policy offers separate Data and artificial intelligence (AI) authoring journeys. Use the lane that matches your protection target. These journeys share governance, but they use different permission models.

Before You Begin

Prepare discovered classifications, supported principals, and approved author access. Refer to start here and roles and permissions.

Configure Data Scope

Refer to Data scope selection. Scope identifies the selected classifications, applicable data, and intended principals. Select an available classification from the catalog rather than typing a new category name. Review changed scope before saving or resubmitting.

Choose Principals

Use explicit supported principals for a narrowly scoped first policy. An all-principals selection broadens scope. It does not mean no access. Refer to principal selection.

Choose Protection and Permissions

Refer to Data protection and permissions. The current Data journey enables Encryption. It marks standalone Masking and Filtering choices Coming Soon.

Data-Element Naming

Inspect the effective title and classification context before Save. The title labels authored work. A native data element is a separate target resource with its own identity. Two data elements with the same name can still have different identifiers in Policy Integration Manager (PIM).

Secure Query Availability

Attribute-based access control (ABAC) and row-level security (RLS) describe different kinds of access restriction. ABAC evaluates attributes when deciding access. RLS restricts which rows a query can return. They do not make the disabled Data Filtering choice available. This guide does not prescribe a supported Secure Query authoring recipe. Ask your Secure Query administrator for the procedure supported by your deployment. This is not a required step in the Data authoring journey. Refer to integration flows for the products covered by these Policy guides.

Save and Submit Data Work

Refer to Data Save and validation. Saving persists a draft. It does not approve or publish it. The draft is proposed work. The governed revision records approved intent after review. Continue with submission only after inspecting saved findings.

Review and Approval Controls

Refer to review and approval after submission. The Panel’s Reject action requests changes. It does not erase the proposal.

Choose AI Authoring

Refer to AI authoring. Configure Federated Guardrails and principal-specific Unprotect choices. Then inspect preview and save. Preview does not persist or activate a policy.

The AI configuration instructions explain classifications, supported principals, and principal-specific Unprotect permission.