---
schema_version: "1"
id: da009a365fbca3c7bb4ed702d959c3aa7131fa9377604502dd4bdc04899aef8f
title: Implement Data Governance Permissions for Audit and Feedback Objects
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ai/264-0-0/generative_ai_feedback_data_governance.md
canonical_url: https://help.salesforce.com/s/articleView?id=ai.generative_ai_feedback_data_governance.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: aeabe754416b72650b4b41470360cdaf4452809ef8157d8aef68b78902a1c1fe
description: Audit and feedback data can contain sensitive information, such as personally identifying information (PII), that you want to redact or hide from unauthorized users. Use Data Cloud Data Governance to protect sensitive data by setting up dynamic data masking and field-specific data exclusion policies. Grant access to the impacted Data 360 objects according to an access policy.
products:
  - Agentforce
  - Cross Cloud
release: "264"
---
# Implement Data Governance Permissions for Audit and Feedback Objects

Audit and feedback data can contain sensitive information, such as personally identifying information (PII), that you want to redact or hide from unauthorized users. Use Data Cloud Data Governance to protect sensitive data by setting up dynamic data masking and field-specific data exclusion policies. Grant access to the impacted Data 360 objects according to an access policy.

## Permission Sets for Data Spaces

Apply permissions at the data space level. That way, only authorized users can view or query Einstein AI Audit and Feedback data.

For permission set access tiers, see [Data 360 Standard Permission Sets](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions.htm&language=en_US&type=5).

- On the `default` data space, users with the Data Cloud Architect (formerly the Data Cloud Admin) permission set have access to all the data (by default). The Data Cloud Architect can grant data access to users with the Data Cloud User permission set. To define the scope for data space access, see the instructions in [Assign a Data Space Permission Set to a Data Cloud User](https://help.salesforce.com/s/articleView?id=data.c360_a_assign_permission_set.htm&language=en_US&type=5).
- On a custom data space, only users with the Data Cloud Architect permission set have access to all the data.

## Access Policy Options

You can select from either attribute-based access control (ABAC) or role-based access control (RBAC). Access control provides granular control over your users' access to data. Follow instructions in [Assign Data Access](http://sfdc.co/dc-objects) to assign these objects to an available policy.

## Impacted Data 360 Objects

For a list of impacted Data 360 objects, see [Data Model for Generative AI Audit and Feedback](https://help.salesforce.com/s/articleView?id=ai.generative_ai_feedback_data_model.htm&release=264.0.0&type=5 "Understand and analyze your Einstein generative AI audit and feedback data by using the appropriate data model objects (DMOs). Einstein generative AI Audit and Feedback data is streamed to a data lake object (DLO) in Data 360 and mapped to data model objects (DMOs).").

If you have more than one data space, grant access to objects in each data space. Object names in non-default data spaces follow the convention of `<DataSpace Prefix>_<Object Name>`.

## Test Your Access Policies

After you've updated permissions, be sure to test user access to collected audit and feedback data.