DevOps Articles

Data Access Management with ACEs vs. ACLs: The Power of ‘AND’ and ‘NOT’

During your trip, your son announces that he’ll be dropping by for a couple days — now you need to grant him access to your home. Now imagine your house has millions of windows to lock in thousands of rooms and many different groups are allowed access to only certain rooms.

You can manage who has access and who is denied access to data in a variety of ways.

Imagine you grant access and read/write operations for particular data to people in finance and to a fraud analyst team as shown in Table 1.

This range of control allows access to be controlled en masse or in detail or at any level in between.