QuestionQ9

Governance

Adobe Experience Platform enforces strict user access control across its various teams. Three distinct teams are working on an enterprise project. The Project Management team needs visibility into Project Details and Timelines, but not Customer Data. The Data Analysis team needs access to schema and segment details to analyze user behavior, but not Project Timelines. The Leadership team requires access to Project Details, Timelines, and aggregated User Data, but not granular customer data for data-privacy reasons. The organization decides to use ABAC in Adobe RTCDP to manage these access controls efficiently.

What is the best strategy for handling the required access controls for each team with ABAC?

Explanation

Adobe Experience Platform ABAC uses labels on resources and an access-control policy to restrict access unless the user is in a role with matching labels. Assigning labels that represent each team’s permitted access scope to the applicable resources enables the policy and matching team roles to enforce the required separation of project information, schema and segment details, aggregated data, and granular customer data. Adobe Attribute-Based Access Control end-to-end guide

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!