What is PrivaceraCloud?
PrivaceraCloud is a Software-as-a-Service (SaaS) data access governance and enforcement management platform. It works with a wide range of data repositories, including AWS and Azure based repositories.
PrivaceraCloud manages and controls access to sensitive data. It enables:
- Central definition and management of fine-grained access control policies across multiple cloud services
- Data access audits
- Compliance, audit, and governance reports
- Encryption, decryption, and masking
Data Access Management based on ABAC (Attribute-Based Access Control) and RBAC (Role-Based Access Control) policies.
Resource-based (physical and logical metadata) data classification.
Tag-based data classification (business metadata).
Comprehensive normalized audits with rich event metadata detailing who, what, when, and where.
Reports and dashboards
Restrictions to access are configured using data access policies which are comprised of rules. Rules specify which users and groups can access what data.
A useful PrivaceraCloud account has three parts: data resources, data access users, and data access policies.
Data resources, which must be connected to PrivaceraCloud. Three different data access methods are for this connection: Plugin, Data Access Server, and Policy Sync. A service represents this connection to a data source or data repository.
Data access users requiring access to the connected resources. These users can be defined individually within PrivaceraCloud using Access Manager: Users/Groups/Roles. Users and Groups may also be imported from an a user directory service such as LDAP/AD, Azure Active Directory, or a SCIM service using the Setup Wizard or using UserSync import in Settings:Datasource. (See Connect Users.)
Policies define the relationship between the data resources and the data access users. Policy rules are established and managed in Privacera Access Manager: Resource Policies and Access Manager: Tag Policies.
How PrivaceraCloud Works#
PrivaceraCloud works with and extends Apache Ranger to provide data access governance with centralized management of authorization policies and auditing. Policy enforcement points for access control run in your AWS or Azure environment. PrivaceraCloud policies are distributed to and synchronized with these policy enforcement points. These distributed enforcement points log all audit information back to your PrivaceraCloud account.