Snapshot 253525

Document
Security page
URL
https://docs.treasure.ai/products/control-panel/security
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
394567 bytes
SHA-256 (raw)
d5cb1c1e4d31a482c2b8479b11088d91ff206131bab5e17536a4b6e5f367edd8
SHA-256 (normalized text)
f9d7035b86aafa8a9303768a142a5bf6c0bed36e34cd6a5d3c9d77187fd909db

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to content
Getting Started
Product Overview
AI
AI Studio
CLI (Treasure Code)
AI Voice
Treasure AI Labs
Activation
Overview
Engage Studio
Personalization Studio
Customer Data Platform
Overview
Complete CDP
Composable CDP
Administration
Control Panel
Overview
Security
About access control & data governance
About private connect
Accessing REST APIs
API Keys
Authentication requirements
Users
Tag Management
Policies
Audit Logs
Sign-in Settings
IP Allowlist
Settings
Data Tank
Utilization
My Profile
Support
Developer Resources
API Documents
Sites and Endpoints
Requirements and Limitations
Release Notes
Security & Trust
Control Panel
/
About access control & data governance
About private connect
Accessing REST APIs
Authentication requirements
/
About access control & da...
Last updated 4 days ago
About Access Control and Data Governance
Treasure Data's solutions for access control and data governance provide customers with the ability to limit access to TD, its objects, and data while allowing them to annotate TD objects, using custom tags, according to their business requirements.
Access Control
Access control is the selective restriction of access to Treasure Data, its objects, and data. Permission to access a resource is called authorization. Access control settings are managed from within Treasure Console > Control Panel. Account owners and administrators have additional control over access to resources and capabilities.
Treasure Data provides the following access control features:
Users - Manage user accounts, roles, and delegated groups.
Policies - Create and apply permission policies for databases, workflows, Audience Studio, and more.
IP Allowlist - Restrict access by IP address at the account, user, or API key level.
Sign-in Settings - Configure password policies, SSO, and session timeouts.
Audit Logs - Track and monitor user activity and system events.
Private Connect - Establish private network connectivity to Treasure Data.
API Keys - Manage API key types, expiration policies, and key rotation.
Accessing REST APIs - Manage API keys for programmatic access.
Data Governance
Treasure Data's data governance solution provides customers with an intuitive interface to build data catalogs by labeling practices. Customers can create custom tags and annotate Treasure Data objects according to their business requirements, for example labeling sensitive data such as PII. The TD administrator can manage tags and monitor the usage of every tag across datasets in one centralized place. Data discovery can also be achieved through tagging and filtering, allowing users to browse the databases and tables using existing tags.
With column tags in place, administrators can implement access control by writing tag-based policies and automatically applying controls to datasets at the fine-grained level. The policy gives the ability to implement dynamic data masking and blocking access to protect data from unauthorized access of sensitive data according to the tag (e.g., sensitive data or personally identifiable information, such as credit card numbers).
Data Unification and Classification
Treasure Data addresses data unification and classification with the Tags feature. The solution includes the following:
Creating tags
Attaching the tags to columns.
Creating policies to enforce column access.
Learn more about:
About Tags - Create and manage tags for data classification and access control.
About Column-level Access Control - Restrict column access using tags and policies with dynamic data masking.
Implementing Column-level Access Control - Step-by-step guide to set up column-level access control.
Annotated Schema APIs for Data Classification - Programmatically manage column annotations and tags via REST API.
Overview
About private connect
On this page
Access ControlData GovernanceData Unification and Classification