# Certifications Exemptions and Diffs

## Required permissions

To manage and apply existing policies to data sources, a user must have either the CREATE\_DATA\_SOURCE Immuta permission or be manually assigned the owner role on a data source.

## Certify global policies

After a policy with a certification requirement is applied to a data source, data owners will receive a notification indicating that they need to certify the policy.

1. Navigate to the **Policies** tab of the affected data source, and review the policy in the **Data Policies** section.
2. Click **Certify Policy**.
3. In the **Policy Certification** modal, click **Sign and Certify**.

## Add policy exemptions

{% hint style="warning" %}
**Deprecation notice**

The ability to exclude users from all data policies at the data source level has been deprecated. In order to exempt users from having policies being applied to them, add them in the [exception criteria of your policies](/2024.3/secure-your-data/secure-introduction/scalability-and-evolvability.md#exception-based-policy-authoring).
{% endhint %}

Once this setting is enabled on the [app settings page](/2024.3/application-settings/how-to-guides/config-builder-guide.md#allow-policy-exemptions), data owners can exempt users from policies on a per-data-source basis to allow those users to see all the data, regardless of the global or local policies applied. *Note: By default, policy exemptions are disabled in Immuta.*

1. Select a data source and click the **Policies** tab.
2. In the **Data Policies** menu, click **Add Exemptions**. This button will only be visible if policy exemptions have been enabled.
3. Enter the names of the **users** or **groups** to exempt from your policies.
4. Click **Create** to finish your exemption policy.
5. Click **Save All** to apply the policy to your data source.

## View policy diffs

Once you have a data policy in effect, you can view the changes in your policies by clicking the **Policy Diff** button in the data policies section on a data source's policies tab.

The **Policy Diff** button displays previous policies and the current policy applied to the data source.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.immuta.com/2024.3/secure-your-data/authoring-policies-in-secure/data-policies/how-to-guides/manage-policies-per-data-source.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.