---
title: What Is Deny-by-Default Access? | Vantage Compute
canonical: 'https://www.vantagecompute.ai/glossary/deny-by-default-access/'
description: Deny-by-default access means a user can do nothing until a policy grants it.
updated: '2026-11-12'
---
# What Is Deny-by-Default Access?

Deny-by-default access means a user can do nothing until a policy grants it.

[Book Demo](https://www.vantagecompute.ai/contact/)

## How it works

- A new user starts with no access.
- Policy grants each role only what it needs.
- The policy is checked before an action, not after it.

## How Vantage Compute relates

Vantage Compute enforces deny-by-default access with your own identity provider (SSO and RBAC), before a job starts.

## Related terms

- [Secure research computing enclave](https://www.vantagecompute.ai/glossary/secure-research-computing-enclave/)
- [Audit trail for GPU usage](https://www.vantagecompute.ai/glossary/audit-trail-for-gpu-usage/)