---
schema_version: "1"
id: bd743b78dcd5dd85a45a3b5fefbd6305cb4accb78f7a4e2318b326a951899229
title: Assign Data Access
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_dc_access.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_dc_access.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 44e55cb52f2e7e19e73ba432a0eba73ee9ea3cf91fbc04b5019c9e0de32aff95
description: For data governance, assign access to Data 360 objects using either role or attribute-based policies, or maintain an Allow All policy.
products:
  - Data 360
release: "264"
---
# Assign Data Access

For data governance, assign access to Data 360 objects using either role or attribute-based policies, or maintain an Allow All policy.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All Editions</strong> supported by Data 360. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;release=264.0.0&amp;type=5" title="Data 360 is available in several supported Salesforce editions. Some Data 360 features also require additional licenses.">Data 360 edition availability</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:left;vertical-align:top;" id="d150436e71">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d150436e71 ">To assign permission sets: </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d150436e71 ">System admin profile </td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d150436e71 ">To assign a data space and to create tags and assign to objects and fields: </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d150436e71 ">
              <p>Permission set: </p>
              <ul>
                <li>Data Cloud Architect </li>

              </ul>
            </td>

          </tr>
        </tbody>
      </table>

Depending on your selected policy, there are multiple steps to complete. ![bookmark](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/data_cloud/images/bookmark_60.png) Bookmark this page or keep it open in a separate window to refer to this topic.

## Role-Based Access Control

To grant access based on roles, follow these steps.

1. Assign a permission set to the user. See [Create Data Cloud Users and Assign Permissions](https://help.salesforce.com/s/articleView?id=data.c360_a_setup_walkthrough.htm&type=5&language=en_US).
2. Assign a data space to the permission set. See [Manage Data Spaces](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces.htm&type=5&language=en_US).
3. In the permission set, select the objects within the data space to grant access. See [Create a Role-Based Access Control (RBAC) Policy in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_create_rbac_access_control_policy.htm&release=264.0.0&type=5 "Manage object permissions for users asigned to a data space.").

## Attribute-Based Access Control

To grant granular access using attribute-based access policies, assign data spaces through permission sets and create an access policy.

1. Assign a permission set to the user. See [Create Data Cloud Users and Assign Permissions](https://help.salesforce.com/s/articleView?id=data.c360_a_setup_walkthrough.htm&type=5&language=en_US).
2. Assign a data space to the permission set. See [Manage Data Spaces](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces.htm&type=5&language=en_US).
3. Create tags and assign to objects and fields. See [Create a Tag in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_create_a_tag.htm&release=264.0.0&type=5 "Tags are essential for organizing, classifying, and managing data at scale. They act as metadata labels that describe the content, sensitivity, usage, or purpose of a data object or field. Tags can have one parent and multiple child tags, but they don't support more than one level of hierarchy.") and [Apply a Tag to an Object or a Field Manually in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_apply_tag_to_object_field.htm&release=264.0.0&type=5 "In Data 360, attach a predefined tag to a data object or field to classify it based on sensitivity, usage, or category.").
4. Create custom permissions and add them to a custom permission set. You can’t add custom permissions to standard permission sets or their clones. See [Custom Permission Sets in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions_custom.htm&type=5&language=en_US)
5. Assign the permission set to users. See [Create Data Cloud Users and Assign Permissions](https://help.salesforce.com/s/articleView?id=data.c360_a_setup_walkthrough.htm&type=5&language=en_US).
6. Create object, field, and record-level policies to enforce granular access control based on specific access requirements. See [Create an Object or Field Level Access Policy in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_create_ols_fls_policy.htm&release=264.0.0&type=5 "In data governance, define who can access specific data objects or fields based on user and data attributes. Create object-level or field-level access policies for users.") and [Create an Record Level Policy in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_create_rbac_access_control_policy.htm&release=264.0.0&type=5 "Manage object permissions for users asigned to a data space.").
7. Delete the out of the box Allow All policy (also known as a day zero policy).

## Allow All Policy

When granular access isn't required, the Allow All policy grants users access to all objects in their assigned data spaces using permission sets. By default orgs have an Allow All policy.

If the policy is deleted or needs to be created, see [Create an Allow All Policy in Data Cloud](https://help.salesforce.com/s/articleView?id=data.c360_a_create_allow_all_policy.htm&release=264.0.0&type=5 "To maintain broad user access without enforcing restrictions, create an Allow All policy in Data 360. This policy grants access to objects within the data spaces assigned to users through permission sets.").