Security and governance

This section explains how DIAL decides who can reach the platform, what each caller may do, how much they may consume, and where data protection depends on the systems you connect. It is for architects and security reviewers who want to understand the model before configuring it. It assumes you have read What is DIAL.

In this section

• Authentication and access control — how callers prove their identity and how DIAL decides what they may access.
• Authorization rules and spaces — rule notation, default permissions, object creation, and the public folder hierarchy.
• Public and private access — role restrictions, inherited folder rules, sharing links, and delegated application access.
• Access control reference — access patterns and permission matrices for resource objects, configuration entities, and Core APIs.
• Usage limits and cost control — token, request, and spending limits, how DIAL enforces them, and how usage is monitored.
• Data protection and isolation — the boundaries between DIAL's controls and the providers, applications, tools, and infrastructure you connect.

Start with Authentication and access control: limits attach to its roles, and the other pages build on its concepts.