# Stardog Entitlement / Permissions

**URL:** <https://community.stardog.com/t/stardog-entitlement-permissions/2435>\
**Category:** Support\
**Created:** [May 12, 2020, 6:15am UTC](https://community.stardog.com/t/stardog-entitlement-permissions/2435 "2020-05-12T06:15:46Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![zorgee](https://avatars.discourse-cdn.com/v4/letter/z/a3d4f5/32.png) [@zorgee](https://community.stardog.com/u/zorgee)\
**Post date:** [May 12, 2020, 6:15am UTC](https://community.stardog.com/t/stardog-entitlement-permissions/2435/1 "2020-05-12T06:15:46Z")

</div>

Is there any documentation on how one can apply various levels of entitlement or permissioning across data in SD.  
For example, can I restrict certain data based on certain roles similar to a relational database where one may be have read/write/update at row/column/table level.

thanks  
Huss

---

<div class="post-metadata">

**Author:** ![zachary.whitley](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/zachary.whitley/32/94_2.png) [@zachary.whitley](https://community.stardog.com/u/zachary.whitley)\
**Post date:** [May 12, 2020, 11:59am UTC](https://community.stardog.com/t/stardog-entitlement-permissions/2435/2 "2020-05-12T11:59:46Z")

</div>

Indeed it does, Stardog supports supports supplying security restrictions at the graph level.

> **[Home](https://docs.stardog.com/)**
>
> Documentation for Stardog, the world’s leading Knowledge Graph Platform for the Enterprise

---

<div class="post-metadata">

**Author:** ![zorgee](https://avatars.discourse-cdn.com/v4/letter/z/a3d4f5/32.png) [@zorgee](https://community.stardog.com/u/zorgee)\
**Post date:** [May 14, 2020, 6:35am UTC](https://community.stardog.com/t/stardog-entitlement-permissions/2435/3 "2020-05-14T06:35:50Z")

</div>

But once a user has access to database, via Stardog Studio for example, are they able able to query any data. Is it possible to lock at triple or higher level? Or mask certain reads?

---

<div class="post-metadata">

**Author:** ![pavel](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/pavel/32/18_2.png) [@pavel](https://community.stardog.com/u/pavel)\
**Post date:** [May 14, 2020, 12:15pm UTC](https://community.stardog.com/t/stardog-entitlement-permissions/2435/4 "2020-05-14T12:15:56Z")

</div>

There's no triple-level security at the moment. As Zach pointed out, there's named graph level security, i.e. you can hide certain named graphs from certain users (and configure read and write permissions separately). The same database can contain multiple named graphs so some users may not be able to see some of them, i.e. some parts of your data.

Best,  
Pavel

---

<div class="post-metadata">

**Author:** ![zachary.whitley](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/zachary.whitley/32/94_2.png) [@zachary.whitley](https://community.stardog.com/u/zachary.whitley)\
**Post date:** [May 14, 2020, 12:41pm UTC](https://community.stardog.com/t/stardog-entitlement-permissions/2435/5 "2020-05-14T12:41:26Z")

</div>

In addition to what @pavel said I would add that you can have as few as a single triple in a named graph.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex030/uploads/stardog/original/2X/e/ed66b48a616f505106a4acde3c9cee7e6da9bc67.svg) [@system](https://community.stardog.com/u/system)\
**Post date:** [May 28, 2020, 12:41pm UTC](https://community.stardog.com/t/stardog-entitlement-permissions/2435/6 "2020-05-28T12:41:33Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.