DATA SECURITY
Automate access requests, review entitlements, and enforce ethical walls. Every request stays on record.
Trusted by 8,000+ customers
OVERVIEW
Varonis routes every access request to the person who owns the data. Approved changes are applied for you, and every decision is kept on record.
Your users request access to folders, sites, and groups from one portal. Each request goes straight to the right owner.
Your users request access to folders, sites, and groups from one portal. Each request goes straight to the right owner.
Add authorizers at as many levels as you need. Each level approves before the next one sees the request.
Add authorizers at as many levels as you need. Each level approves before the next one sees the request.
Once a request is approved, Varonis commits the change to your data source. No tickets for IT.
Once a request is approved, Varonis commits the change to your data source. No tickets for IT.
Focus on the permissions and exposed data that could increase the impact of a breach.
Bring data discovery, access visibility, and activity monitoring together to support your compliance program.
OWNERSHIP
Assign a business owner to each share, site, or group. Ownership flows down to every folder below it. Owners see only their own resources and requests.
REQUESTS
Your users request access for themselves or someone else. Owners and authorizers approve or deny it. Varonis applies the change. Requests left pending for 30 days cancel on their own.
ATTESTATIONS
Owners recertify access on a schedule. Keep what's needed and remove what isn't, including file-level sharing links. Each review covers only the owner's data.
Ethical walls
Block all access between teams that must stay apart, like your buy-side and sell-side teams. Automatic rules remove access by group membership or direct permission. The Enforced Rules report shows every action.
FAQs
Windows file shares, Active Directory, Entra ID, and Microsoft 365, including SharePoint Online, OneDrive, and Teams. Linux, IBM AIX, and other CIFS sources work with extra packages. Exchange Online isn't supported.
Entra ID security groups, Microsoft 365 groups, mail-enabled security groups, SharePoint groups, Windows local groups, and AD distribution groups. Azure distribution lists aren't supported.
Group changes sync within 30 minutes. So do changes made through the API. Direct permission changes apply on the next scan, usually within 25 minutes to 4 hours.
No. It governs containers like sites, libraries, and folders. You can still remove file-level sharing links during a review.
Indefinitely. Every membership, permission, and review request stays searchable and reportable.
Yes. It supports one-way and two-way domain trusts. Cross-domain requests follow your trust settings.
Yes. Data Access Governance is FedRAMP Moderate.
