Data Access Services allows for the consumption of data, ensuring the right policies as determined by Data Access Governance (DAG) is implemented. DAG determines, manages and monitors who has access to which data and how that data is classified, as well as provide an audit trail of access and permission activities. Two possible approaches are attribute-based and role-based access control. * Attribute-based access control (ABAC) is a logical access control methodology where authorization to access data is determined by evaluating attributes (metadata) associated with the subject, object, requested operations, and, in some cases, environment conditions against policy, rules, or relationships that describe the allowable operations for a given set of attributes. * Role-based access control (RBAC) is a policy-neutral access-control mechanism defined around roles and privileges. The permissions to perform certain operations are assigned to specific roles. Members or staff (or other system users) are assigned particular roles, and through those role assignments acquire the permissions needed to access data. Enforcement can take place within identity and access infrastructure or through dedicated Policy Enforcement/Control Points.