---
schema_version: "1"
id: de8933db2c787fcaab725c5023189859e50357ea4fb578f88e1b4939b714e4ba
title: Implement Data Governance Permissions for Knowledge/RAG Quality Metrics and Data Objects
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ai/264-0-0/generative_ai_monitor_retrieval_data_governance.md
canonical_url: https://help.salesforce.com/s/articleView?id=ai.generative_ai_monitor_retrieval_data_governance.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 43a6a7c74b605ea64437762f5c55470054ac8d5ef4ea41160aeeb7785e93da62
description: Knowledge/RAG Quality Metrics and Data can contain sensitive information, such as personally identifying information (PII), that you want to redact or hide from unauthorized users. Use Data Cloud Data Governance to protect sensitive data by setting up dynamic data masking and field-specific data exclusion policies. Grant access to the impacted Data 360 objects according to an access policy.
products:
  - Agentforce
  - Cross Cloud
release: "264"
---
# Implement Data Governance Permissions for Knowledge/RAG Quality Metrics and Data Objects

Knowledge/RAG Quality Metrics and Data can contain sensitive information, such as personally identifying information (PII), that you want to redact or hide from unauthorized users. Use Data Cloud Data Governance to protect sensitive data by setting up dynamic data masking and field-specific data exclusion policies. Grant access to the impacted Data 360 objects according to an access policy.

## Access Policy Options

You can select from either attribute-based access control (ABAC) or role-based access control (RBAC). Access control provides granular control over your users' access to data. Follow instructions in [Assign Data Access](http://sfdc.co/dc-objects) to assign these objects to an available policy.

## Impacted Data 360 Objects

For a list of impacted Data 360 objects, see [Data Model for Knowledge/RAG Quality Data and Metrics](https://help.salesforce.com/s/articleView?id=ai.generative_ai_monitor_retrieval_data_model.htm&release=264.0.0&type=5 "Use the data in these DLOs/DMOs to build reports, dashboards, and queries that provide insights into knowledge retrieval events.").

If you have more than one data space, grant access to objects in each data space. Object names in non-default data spaces follow the convention of `<DataSpace Prefix>_<Object Name>`.

## Test Your Access Policies

After you've updated permissions, be sure to test user access to collected data for Knowledge/RAG Quality Metrics and Data.

#### See Also

- [Data Governance in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_data_gov_capabilities.htm&language=en_US)