What Is Deny-by-Default Access?

Deny-by-default access means a user can do nothing until a policy grants it.

How it works

  • A new user starts with no access.
  • Policy grants each role only what it needs.
  • The policy is checked before an action, not after it.

How Vantage Compute relates

Vantage Compute enforces deny-by-default access with your own identity provider (SSO and RBAC), before a job starts.

Related terms