PrivaceraCloud Documentation

What is PrivaceraCloud?

:

PrivaceraCloud is a Software-as-a-Service (SaaS) data access governance and enforcement management platform. It works with a wide range of datasources/applications, including AWS and Azure based datasources/applications.

PrivaceraCloud manages and controls access to sensitive data. It enables:

  • Central definition and management of fine-grained access control policies across multiple cloud services

  • Data access audits

  • Compliance, audit, and governance reports

  • Encryption, decryption, and masking

Key Features
  • Data Access Management based on ABAC (Attribute-Based Access Control) and RBAC (Role-Based Access Control) policies.

  • Resource-based (physical and logical metadata) data classification.

  • Tag-based data classification (business metadata).

  • Comprehensive normalized audits with rich event metadata detailing who, what, when, and where.

  • Reports and dashboards

Basic Concepts

Restrictions to access are configured using data access policies which are comprised of rules. Rules specify which users and groups can access what data.

A useful PrivaceraCloud account has three parts: Applications, data access users, and data access policies.

  1. About applications, which must be connected to PrivaceraCloud. Three different data access methods are for this connection Data access methods.

  2. Data access users requiring access to the connected resources. These users can be defined individually within PrivaceraCloud using About data access users, groups, and roles resource policies

    Users and Groups can also be imported from an a user directory service such as LDAP/AD or UserSync.

  3. Policies define the relationship between the data resources and the data access users. Policy rules are established and managed in Resource Policies and Tag Policies.

How PrivaceraCloud Works

PrivaceraCloud works with and extends Apache Ranger to provide data access governance with centralized management of authorization policies and auditing. Policy enforcement points for access control run in your AWS or Azure environment. PrivaceraCloud policies are distributed to and synchronized with these policy enforcement points. These distributed enforcement points log all audit information back to your PrivaceraCloud account.