Varonis Data Access Management Gets Granular

Varonis Systems' update of its DataPrivilege entitlement management software lets users control access permissions even down to the individual level.

Varonis Systems has enhanced its DataPrivilege data entitlement management software, adding granular levels of access control right down to who, when and for how long.

With DataPrivilege, the responsibility of managing data entitlements in the enterprise falls squarely on the owners of the data, as opposed to on IT administrators who may not have an understanding of the business context for the data, said Raphael Reich, senior product marketing manager for New York-based Varonis. When requests come for access to folders or files, the data owners can grant or deny permission.

DataPrivilege 2.5, the latest version of the software, includes the ability to grant permissions by individual user, giving the authorizer the flexibility to control access in a very precise way, such as setting a finite time period for it, company officials said.


Click here to read about the growing master data management market.

"What you can do in 2.5 is go in and put a really fine-grained permission in place that says that this particular user has access and again they may have requested it for read and write, and maybe you just want to give them read access, so that the 2.5 granular permissions allow you to tailor access down to the individual level," Reich said.

Other enhancements include a new level of request brokering that enables users to ask to be added to specific Active Directory user groups and the automation of rules to help with enforcement of entitlements.

For example, a data owner may define a rule stating that all requests to access the folder named "finance" will be approved with a "read only" grant for a period of one week, company officials said.

Chris Christiansen, an analyst at the research firm IDC, said in a statement that managing data privileges remains a manual process for many organizations. Tools like DataPrivilege put control of the data back into the hands of business owners with direct insight into who should have rightful access, and can help IT administrators save time by automating this process and cutting down on help desk calls, he added.

The software also includes enhanced reporting capabilities, with results that can be tailored and arranged in a variety of ways to use in forensic analysis and audit reporting, company officials said.


Check out eWEEK.coms for the latest database news, reviews and analysis.