> For the complete documentation index, see [llms.txt](https://documentation.immuta.com/2026.2/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.immuta.com/2026.2/governance.md).

# Governance

- [Introduction](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure.md): Select your use case
- [Automate Data Access Control Decisions](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/automate-data-access-control-decisions.md)
- [The Two Paths: Orchestrated RBAC and ABAC](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/automate-data-access-control-decisions/the-two-paths.md): Orchestrated RBAC and ABA
- [Managing User Metadata](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/automate-data-access-control-decisions/managing-user-metadata.md)
- [Managing Data Metadata](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/automate-data-access-control-decisions/managing-data-metadata.md)
- [Author Policy](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/automate-data-access-control-decisions/author-policy.md)
- [Test and Deploy Policy](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/automate-data-access-control-decisions/test-and-deploy-policy.md)
- [Compliantly Open More Sensitive Data for ML and Analytics](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/compliantly-open-more-sensitive-data-for-ml-and-analytics.md)
- [Managing User Metadata](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/compliantly-open-more-sensitive-data-for-ml-and-analytics/open-managing-user-metadata.md)
- [Managing Data Metadata](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/compliantly-open-more-sensitive-data-for-ml-and-analytics/open-managing-data-metadata.md)
- [Author Policy](https://documentation.immuta.com/2026.2/governance/getting-started-with-secure/compliantly-open-more-sensitive-data-for-ml-and-analytics/open-author-policy.md)
- [Author Policies for Data Access Control](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control.md)
- [Introduction](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/secure-introduction.md): Understand the governance principles behind the design of Immuta
- [Scalability and Evolvability](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/secure-introduction/scalability-and-evolvability.md): Understand how attribute-based access control compares to role-based access control
- [Understandability](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/secure-introduction/understandability.md): Understand the importance of clear, comprehensible policy enforcement
- [Distributed Stewardship](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/secure-introduction/distributed-stewardship.md): Understand the importance of separation of duties
- [Consistency](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/secure-introduction/consistency.md): Understand the importance of consistent policy enforcement across platforms
- [Availability of Data](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/secure-introduction/availability-of-data.md): Understand how anonymization techniques can safely make more data available for users
- [Policies](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure.md): Learn about the policy types available in Immuta to enforce access controls
- [Authoring Policies at Scale](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/policies-explained.md)
- [Data Engineering with Limited Policy Downtime](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/dbt-transform-workflow.md): Minimize policy downtime as you execute transforms using dbt or other transform tools
- [Subscription Policies](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents.md): Learn how to manage table-level access with subscription policies
- [How-to Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/how-to-guides.md)
- [Author a Subscription Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/how-to-guides/subscription-policy-tutorial.md): Build a subscription policy to grant table-level access to users
- [Author an ABAC Subscription Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/how-to-guides/abac-subscription-policy.md): Build a subscription policy that enforces access controls based on users' groups or attributes
- [Subscription Policies Advanced DSL Guide](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/how-to-guides/advanced-dsl-policies.md)
- [Author a Restricted Subscription Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/how-to-guides/restricted-subscription-policies.md): Build a subscription policy that applies only to data sources you own
- [Reference Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/reference-guides.md)
- [Subscription Policies Reference Guide](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/reference-guides/subscription-policies.md): Learn how grant and guardrail subscription policies protect and grant access to data
- [Subscription Policy Access Types](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/reference-guides/subscription-access-types.md): Learn what data platforms support read and write access subscription policies
- [Advanced DSL Policy Builder Functions and Variables](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/section-contents/reference-guides/advanced-special-functions.md): Learn about the definitions and behavior of the variables and functions supported in the advanced DSL policy builder
- [Data Policies](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies.md): Learn how to manage row-, column-, and cell-level access with data policies
- [How-to Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides.md)
- [Author a Masking Data Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/data-policy-tutorial.md): Build a policy that masks columns for users
- [Author a Minimization Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/minimization-tutorial.md): Build a policy that limits the amount of data returned for users
- [Author a Purpose-Based Restriction Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/purpose-tutorial.md): Build a policy that limits access to a specific purpose
- [Author a Restricted Data Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/restricted-data-policies.md): Build a data policy that only applies to data sources you own
- [Author a Reveal Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/author-a-reveal-policy.md): Build a policy that automatically grants exceptions to masking policies
- [Author a Row-Level Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/row-redaction-tutorial.md): Build a policy that limits rows visible to users
- [Author a Time-Based Restriction Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/time-based-tutorial.md): Build a policy that returns data from a specified period of time
- [Policy Certifications and Diffs](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/how-to-guides/manage-policies-per-data-source.md): Create certifications for global policies, certify a policy, and view changes made to a data source's policy
- [Reference Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides.md)
- [Data Policies Reference Guide](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides/data-policies.md): Learn how protect policies and reveal policies enforce access controls
- [Masking Policies](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides/masking-matrix-functions.md): Learn about the types of masking policies Immuta supports
- [Orchestrated Masking Policies](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides/masking-matrix-functions/orchestrated-masking-policies.md)
- [Row-Level Policies](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides/row-redaction-explained.md): Learn how row-level policies limit what data users are allowed to see once they are granted access to a data source
- [Limit to Purpose Policies](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides/limit-to-purpose-policies.md): Learn how purpose policies limit users' access to data
- [Custom WHERE Clause Functions](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides/custom-where-clause-functions.md): Learn about the custom WHERE clause functions Immuta supports
- [Lookup Tables](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/data-policies/reference-guides/lookup-tables.md): Learn how lookup tables can be used to reference user metadata
- [Clone, Activate, or Stage a Policy](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/authoring-policies-in-secure/clone-activate-stage.md): Clone and manage the status of existing global policies
- [Projects and Purpose-Based Access Control](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control.md)
- [Projects and Purpose Controls](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls.md)
- [Getting Started](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/getting-started.md)
- [How-to Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides.md)
- [Create a Project](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/create-project-tutorial.md)
- [Create and Manage Purposes](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/purposes-tutorial.md)
- [Project Management](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/project-management.md)
- [Manage Projects and Project Settings](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/project-management/manage-projects.md)
- [Manage Project Data Sources](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/project-management/manage-data-sources.md)
- [Manage Project Members](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/how-to-guides/project-management/manage-members.md)
- [Reference Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/reference-guides.md)
- [Projects and Purposes](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/reference-guides/projects.md)
- [Why Use Purposes?](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/projects-and-purpose-controls/purposes-explained.md)
- [Equalized Access](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/equalized-access.md)
- [Manage Project Equalization](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/equalized-access/manage-equalization.md)
- [Project Equalization Reference Guide](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/equalized-access/equalization.md): Project equalization
- [Why Use Project Equalization?](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/equalized-access/equalization-explained.md)
- [Masked Joins](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/masked-joins.md)
- [Enable Masked Joins](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/masked-joins/enable-masked-joins.md)
- [Why Use Masked Joins?](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/masked-joins/masked-joins-explained.md)
- [Writing to Projects](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/writing-to-projects.md)
- [How-to Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/writing-to-projects/how-to-guides.md)
- [Create and Manage Databricks Spark Project Workspaces](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/writing-to-projects/how-to-guides/databricks-native-workspace-tutorial.md)
- [Reference Guides](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/writing-to-projects/reference-guides.md)
- [Project UDFs (Databricks)](https://documentation.immuta.com/2026.2/governance/author-policies-for-data-access-control/projects-and-purpose-based-access-control/writing-to-projects/reference-guides/project-udfs.md)
- [Observe Access and Activity](https://documentation.immuta.com/2026.2/governance/detect-your-activity.md): Learn how Immuta monitors your environment
- [Introduction](https://documentation.immuta.com/2026.2/governance/detect-your-activity/detect-introduction.md): Understand the challenges involved in detecting internal data security risks
- [Audit](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit.md): Learn about the audit capabilities Immuta provides
- [How-to Guide](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/how-to-guides.md)
- [Run Governance Reports](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/how-to-guides/governor-guide.md): Build Immuta governance reports to view user activity across Immuta
- [Reference Guides](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides.md)
- [Universal Audit Model (UAM)](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/universal-audit-model-uam.md)
- [UAM Schema](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/universal-audit-model-uam/uam-schema.md)
- [Query Audit Logs](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/query-audit-logs.md)
- [Snowflake Query Audit Logs](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/query-audit-logs/snowflake.md): Learn about the audit schema for Snowflake queries
- [Databricks Unity Catalog Query Audit Logs](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/query-audit-logs/databricks-uc.md): Learn about the audit schema for Databricks Unity Catalog queries
- [Databricks Spark Query Audit Logs](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/query-audit-logs/databricks.md): Learn about the audit schema for Databricks Spark queries
- [Starburst (Trino) Query Audit Logs](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/query-audit-logs/trino.md): Learn about the audit schema for Starburst and Trino queries
- [Governance Report Types](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/reports.md): Understand the report types available for viewing user activity across Immuta
- [Unknown Users in Audit Logs](https://documentation.immuta.com/2026.2/governance/detect-your-activity/audit/reference-guides/unknown-user.md): Identify unknown users in query audit logs for Databricks Unity Catalog
- [Dashboards](https://documentation.immuta.com/2026.2/governance/detect-your-activity/detection.md): Learn about audit dashboards
- [Use the Audit Dashboards How-To Guide](https://documentation.immuta.com/2026.2/governance/detect-your-activity/detection/use-dashboards.md): Visualize the data being queried by your users with audit dashboards
- [Audit Dashboards Reference Guide](https://documentation.immuta.com/2026.2/governance/detect-your-activity/detection/detect-concept.md): Learn about the design and capabilities of audit dashboards
- [Notifications](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications.md): Learn how Immuta notifications help you keep track of events from data consumers and data governors
- [How-to Guides](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications/how-to-guides.md)
- [Enable Email Notifications](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications/how-to-guides/enable-email-notifications.md): Enable email notifications for events within Immuta
- [Create a Webhook](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications/how-to-guides/create-a-webhook.md): Create a notification with webhooks for events within Immuta
- [Manage Monitors and Observations](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications/how-to-guides/create-monitor.md)
- [Reference Guides](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications/reference-guides.md)
- [Monitors Reference Guide](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications/reference-guides/detect-monitors-reference-guide.md)
- [Notification Events](https://documentation.immuta.com/2026.2/governance/detect-your-activity/notifications/reference-guides/notification-events.md): Learn about the notification events available within Immuta
- [Access Data](https://documentation.immuta.com/2026.2/governance/data-consumers.md): Learn how to subscribe to data sources, query data, and impersonate Immuta users
- [Subscribe to a Data Source](https://documentation.immuta.com/2026.2/governance/data-consumers/subscribe-to-data-source.md): Subscribe, view, and search for data sources
- [Query Data](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data.md)
- [Querying Snowflake Data](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data/snowflake.md): Query Immuta-protected data in Snowflake
- [Querying Databricks Data](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data/databricks.md): Query Immuta-protected data in Databricks
- [Querying Databricks SQL Data](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data/databricks-sql.md): Query Immuta-protected data in Databricks SQL
- [Querying Starburst (Trino) Data](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data/trino.md): Query Immuta-protected data in Starburst or Trino
- [Querying Redshift Data](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data/redshift.md)
- [Querying Azure Synapse Analytics Data](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data/synapse.md): Query Immuta-protected data in Azure Synapse Analytics
- [Connect to a Database Tool to Run Ad Hoc Queries](https://documentation.immuta.com/2026.2/governance/data-consumers/query-data/connect-to-a-database-tool-to-run-ad-hoc-queries.md)
- [Subscribe to Projects](https://documentation.immuta.com/2026.2/governance/data-consumers/project-member-guide.md): Subscribe to a project, add data sources to a project, or switch project contexts
- [Impersonate a User](https://documentation.immuta.com/2026.2/governance/data-consumers/user-impersonation.md): Impersonate another Immuta user


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://documentation.immuta.com/2026.2/governance.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
