Enhance Data Security with Granular Governance for Data Graphs

Enable granular access control for your data graphs. Instead of the previous all-or-nothing access model, Data 360 now automatically prunes restricted fields, masks data, and excludes unauthorized child data model objects (DMOs) based on your governance policies.

Where: This change applies to Data 360 in Developer, Enterprise, Performance, and Unlimited editions.

When: This feature is available on a rolling basis starting in August 2026.

Why: Multiple users and AI agents can now safely access the same data graph while viewing only the data they are authorized to see. Data graphs with access control policies on child DMOs remain visible even when certain child DMOs are restricted. This granular access behavior occurs automatically unless you apply an explicit deny policy to the data graph’s output DMO.

How: This feature is enabled automatically. Data graphs remain accessible even when some child DMOs are restricted, and unauthorized data is automatically pruned or masked. If you previously relied on child DMO restrictions to block access to an entire data graph, review your governance policies and apply the appropriate governance tags or an explicit deny policy to the output DMO to prevent unintended visibility.