DE//AGENT
Explore
Policy community intermediate

OPA Data Access Control Policy

Rego policies for least-privilege data access across warehouses, lakes, and catalogs

A comprehensive OPA policy bundle for enforcing data access controls across your data platform. Includes policies for: row-level security, column masking, table-level permissions, and audit logging. Compatible with Trino, Presto, Snowflake, BigQuery, and Databricks via their OPA integrations.

# Install OPA
curl -L -o opa https://openpolicyagent.org/downloads/v0.70.0/opa_linux_amd64_static
chmod +x opa && sudo mv opa /usr/local/bin/

# Clone policy bundle
git clone https://github.com/de-agent/policies.git
cd policies/data-access

At a glance

What Rego policies for least-privilege data access across warehouses, lakes, and catalogs
Where Governance · tech-opa

Learning objectives

  • Understand OPA/Rego for data access control
  • Implement row-level security policies
  • Apply column masking for PII
  • Audit data access decisions

Security scan

Last sweep 2026-10-24: 0 finding(s), 0 marked as examples.

Registry stats

Verification community
Completeness 79
Trust multiplier ×0.12
Composite 39.35 · adequate
Difficulty intermediate
License Apache-2.0
Security flags 2