Choose the policy home

In the same quarter, you are opening your data to a partner and moving your customers onto one shared table. Six access requirements have landed in the backlog, and the team keeps reaching for the same tool for all six: a broader allow on whichever role is nearest.

Three of the layers from the video decide these. A policy you attach to the caller, a policy you attach to the resource, and a condition that narrows an allow you already have.