---
schema_version: "1"
id: 92ba09ee16aee02dee396e7fbb10c4d6ebf55ac803b517852b6cbdf4871c7871
title: Get Started with Data Governance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_getting_started_data_gov.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_getting_started_data_gov.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 684861bb53473352f2a84372cefcc930eac312cdf93ce996d45adb968cb34fb9
description: Before using Data Governance features, it's important to review the prerequisites and the steps required to enable governance across your organization’s data.
products:
  - Data 360
release: "264"
---
# Get Started with Data Governance

Before using Data Governance features, it's important to review the prerequisites and the steps required to enable governance across your organization’s data.

## Prerequisties

Review the following steps before getting started.

- Familiarize yourself with [data spaces](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces.htm&type=5&language=en_US), which define the boundaries for data visibility.
- To create specific, attribute-based policies, evaluate Data 360 standard [permission sets](https://help.salesforce.com/s/articleView?id=data.c360_a_setup_permission_sets.htm&type=5&language=en_US) and associated [data governance permissions](https://help.salesforce.com/s/articleView?id=data.c360_a_manage_tags_classifications_taxonomies_policies.htm&release=264.0.0&type=5 "Review the permissions and permission sets required to effectively use data governance features in Data 360.").
- (Optional) Enable Einstein to trigger automatic tagging. See [Set Up Einstein Generative AI](https://help.salesforce.com/s/articleView?language=en_US&id=sf.generative_ai_enable.htm&type=5).

## Overview of Steps

To grant granular access using access policies, assign data spaces through permission sets and create an access policy.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/images/icon_note.png)

Note Assigning a data space through a permission set doesn’t automatically give users access to the data.

To create and assign access policies, you must:

- Create tags and assign to objects and fields.
- Create custom permissions and add them to a custom permission set. You can’t add custom permissions to standard permission sets or their clones.
- Assign the permissions to the intended users.
- Create access policies to grant data access.

## Control Models

Data 360 uses a combination of access control models to deliver granular, scalable, and policy-driven governance. Each mechanism serves a distinct purpose, and together they create a comprehensive security and governance framework.

  
| LAYER | function | what it controls |
| --- | --- | --- |
| Data Spaces | Data visibility scope | Controls which data objects or records a user can interact with. It can be used to grant access to a set of objects but doesn’t support fine-grained or row-level control. |
| Role-based Access Control (RBAC) | Base access to features and setup | Navigation, admin tasks, configuration rights, and access assignment to specific objects within the dataspace. |
| Attribute-based Access Control (ABAC) | Policy-driven access based on context | Object-level, field-level, row-level, and masking rules |

- **[Data Cloud Governance Feature Availability by License](https://help.salesforce.com/s/articleView?id=data.c360_a_data_gov_feature_availability.htm&release=264.0.0&type=5)**  
    Salesforce offers a tiered licensing model for data governance within Data 360, enabling customers to scale from foundational governance to advanced, AI-driven controls. Understand which data governance features are available with which Data Cloud license.
- **[Data 360 Governance Permissions](https://help.salesforce.com/s/articleView?id=data.c360_a_manage_tags_classifications_taxonomies_policies.htm&release=264.0.0&type=5)**  
    Review the permissions and permission sets required to effectively use data governance features in Data 360.
- **[Assign Data Access](https://help.salesforce.com/s/articleView?id=data.c360_a_dc_access.htm&release=264.0.0&type=5)**  
    For data governance, assign access to Data 360 objects using either role or attribute-based policies, or maintain an Allow All policy.
- **[Data Governance Considerations](https://help.salesforce.com/s/articleView?id=data.c360_a_before_you_begin_data_gov.htm&release=264.0.0&type=5)**  
    Before you begin, it’s important to review supported features and considerations for using data governance features in Data 360.