Diagram Atlas

DataDRAFT ENTRY

Data security matrix

A matrix that maps roles or personas to data products, operations, and control levels.

Use this diagram to generate

USE WHEN

Access policy differs systematically across roles or data classes.

AVOID WHEN

You need to show authentication message flow.

VISUAL GRAMMAR

01roles02assets03permission cells04legend

SEMANTIC RULES

Use a finite permission vocabulary.
Show deny states explicitly.
Keep policy exceptions outside the main matrix.

QUESTIONS IT ANSWERS

Who may access what?
Which permission differs by role?

DRAFT MACHINE CONTRACT

id: dp-security-matrix
status: draft
family: data
reading_task: Compare access permissions by role and asset.
grammar:
  - roles
  - assets
  - permission_cells
  - legend
checks:
  - use_a_finite_permission_vocabulary
  - show_deny_states_explicitly
  - keep_policy_exceptions_outside_the_main_matrix

Data security matrix

Choose by the question you need to answer.