Migrate your data governance policies from sandbox to production orgs using DevOps data kits. This approach maintains consistency and reduces manual errors.
Required Editions
| Available in: All Editions supported by Data 360. See Data 360 edition availability. |
| User permission needed | |
|---|---|
| To deploy Data 360 changes: | Data Cloud Architect |
Verify that your deployment meets these prerequisites before starting a mergeback.
- Create and test governance policies in a sandbox org. See:
- The target organization contains the necessary data model objects (DMOs) and data lake objects (DLOs).
- Bundle all policies and their associated protected objects in a single data kit to prevent policy leaks and unintended data exposure.
- Make sure dependencies for record-level security (RLS) policies, including objects referenced in joins, exist in the target environment.
Important Deploy governance policies only using Salesforce change sets. The
Salesforce CLI doesn’t support governance policy deployment.
To move governance policies:
-
Create a DevOps data kit in your sandbox org. See Create a Data 360 Sandbox.
- Select the data assets such as data stream bundles or DLOs that you want to migrate.
- In the data kit wizard, select the associated RLS, OLS, and FLS policies and tag assignments.
- If your implementation includes RLS policies with joins, create a second DevOps data kit. Add the data stream bundle that contains the RLS policies with joins and related tag assignments.
-
Add the data kit and its tag assignments to an outbound change set.
- From Setup, in the Quick Find box, enter Outbound Change Sets, and then select Outbound Change Sets.
- Create a new outbound change set.
- Add the data kit with all its dependencies to the change set. See View and Add Dependent Components to a Change Set.
- Review the publishing sequence. Make sure that the dependent DLOs or DMOs are deployed before or are higher up in the deployment sequence.
- Upload the change set to the production org. See Upload an Outbound Change Set.
-
In the production org, deploy the change set.
Deploying the change set installs the DevOps data kit and applies the associated governance policies in the target org. See Deploy a Change Set.
-
Verify the deployment status.
- In the target org, go to Data Kits, click Deployment History and verify that the deployment is successful.
- In the target org, go to Data Governance, click Policies and verify that the merged RLS, FLS, and OLS policies appear in the dashboard and are active.