Data Access Control – Google Cloud Platform (DAC-GCP)

Download Datasheet

Overview
Reviews
Support

Overview

“Partner Offerings” are offerings published by third party Collibra Partners via the Collibra Marketplace. Partners create, own and are responsible for their Partner Offerings. Fees, if any, associated with Partner Offerings are designated and collected by the Partner. Your use and purchase (if applicable) of Partner Offerings are subject to (a) the terms and conditions referenced on or via link within the Partner Offering listing, or (b) if such terms and conditions are not referenced on the listing, then the Collibra Marketplace License Agreement. Your Master Agreement with Collibra for the Collibra Service DOES NOT apply to your use of the Partner Offerings (including any warranties, support services and service levels referenced therein). Collibra may, but is not obligated to provide first level support for customers of the Collibra Service with respect to your use of a Partner Offering.

The DAC-GCP (Data Access Control – Google Cloud Platform) Accelerator integrates the Governance capability of Collibra with the big-data ecosystem of GCP-BigQuery, along with the related access management services like IAM and Google Groups to automate and control access-granting and data provisioning through Collibra.

Following business and functional challenges are normally encountered in provisioning access to big-data data sources like GCP-BigQuery:

Lack of a centralized governance platform that combines business level governance with data provisioning
Governance of metadata, harvesting from other sources into GCP-BigQuery
Lack of clarity for data consumers on access request mechanisms
Data discovery challenges due to multiple metadata platforms and non-uniform discovery features
Lack of a uniform and automated dataset checkout mechanism
Metadata enrichment and governance are not accessible out of the box in the GCP-BigQuery environment

The GCP Data Access Control (DAC) framework, which is built around Lorang Technology’s proprietary Metadata Integration Framework (MIF) addresses above challenges in data access governance and provisioning of GCP BigQuery resources.

It provides a simplified and effective Collibra based governance mechanism with automated data-access provisioning, by orchestrating the GCP-BigQuery data source, role and policy-based accesses (Collibra) and policy enforcement /access provisioning (using GCP IAM) with reduced manual intervention.

Integration with ServiceNow is also available to handle manual access requests. The Collibra Data Intelligence platform provides a Catalog of all the Data resources and the capability to request Data access. The policy enforcement /access provisioning determines which enforcement mechanism will be triggered based on the sensitivity of data (toxic combinations, PIIs etc.) and enforces policies in the target GCP-BigQuery data source automatically, with the help of java-based DAC service. DAC-GCP finds the optimal way to grant access to the BigQuery data sources while automatically applying and enforcing access and security policies that are pre-defined by the Policy Admin in Collibra.

DAC-GCP Features:

Provides unified access policy management platform for GCP-BigQuery data sources
A unified Collibra Operating Model maps to the policy structure of target access control framework (includes BigQuery, GCP IAM, Google Groups)
Detects and synchronizes policy changes between Collibra and GCP-BigQuery using the respective REST APIs
Converts policy formats between Collibra and GCP-BigQuery
Provides auto-notification of access grants
Enables inheritance of access tags (PII, PCI, etc.) from the business taxonomy / data classifications to the physical data elements
Provides recommendation of access policies based on toxic combinations of given data sets
Streamlines data shopping experience for the user, hiding the complexity of roles, access policies, permissions, etc.
Seamlessly integrates with ServiceNow ticketing system