---
schema_version: "1"
id: 0e5838f844cf68ff5c37e6b35703e1f9f7c3c8d1fad290614b41159e3332bd0e
title: Enhance Data Security with Granular Governance for Data Graphs
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_cdp_2026_winter_dg_granular_gov.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_cdp_2026_winter_dg_granular_gov.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: db0620b74dff07650d9d112b2bcf01738202364b44c58e31f18cf78a20abbf27
description: Enable granular access control for your data graphs. Instead of the previous all-or-nothing access model, Data 360 now automatically prunes restricted fields, masks data, and excludes unauthorized child data model objects (DMOs) based on your governance policies.
products:
  - Cross Cloud
release: "264"
---
# Enhance Data Security with Granular Governance for Data Graphs

Enable granular access control for your data graphs. Instead of the previous all-or-nothing access model, Data 360 now automatically prunes restricted fields, masks data, and excludes unauthorized child data model objects (DMOs) based on your governance policies.

**Where:** This change applies to Data 360 in Developer, Enterprise, Performance, and Unlimited editions.

**When:** This feature is available on a rolling basis starting in August 2026.

**Why:** Multiple users and AI agents can now safely access the same data graph while viewing only the data they are authorized to see. Data graphs with access control policies on child DMOs remain visible even when certain child DMOs are restricted. This granular access behavior occurs automatically unless you apply an explicit deny policy to the data graph’s output DMO.

**How:** This feature is enabled automatically. Data graphs remain accessible even when some child DMOs are restricted, and unauthorized data is automatically pruned or masked. If you previously relied on child DMO restrictions to block access to an entire data graph, review your governance policies and apply the appropriate governance tags or an explicit deny policy to the output DMO to prevent unintended visibility.

#### See Also

- [_Salesforce Help_: Control Data Graph Access](https://help.salesforce.com/s/articleView?id=data.c360_a_dg_granular_gov.htm&language=en_US)