Data Access Policies
Data Access Policies (DAPs) let you control what data each user or role can see in dashboards.
🚫 Access permissions
To create or edit Data Access Policies, you must have the access right “Can create and edit Data Access Policies.”
- If you try to access this section without the right permissions, Starred will display a pop-up notification.
- A user can belong to only one Data Access Policy at a time. It is not possible to switch between different data sets.
Types of Data Access Policies
There are two types of Data Access Policies in Starred:
- Role-level DAP - Best for restricting access by role (e.g. recruiters) Based on user name or email address
- Individual DAP - Best for restricting access by user or group of users. Based on specific custom fields
Role-level Data Access Policies
A role-level DAP limits visibility for all users within that role.
For example:
- Recruiters can only see survey responses linked to their own candidates.
- They will not see feedback related to other recruiters’ candidates.
When a user with this restriction logs in, their dashboard automatically filters responses to only what’s assigned to them.
You can create role-level DAPs directly from the User Roles section. 📘 Learn how to create a DAP on role-level →
Individual Data Access Policies
An individual-level DAP gives you more flexibility. You can choose any custom field as the filter and assign specific values (e.g. recruiter names, offices, departments) to users.
For example:
- Team Leads can see survey responses linked to their recruiters.
- They can still apply a Recruiter filter to narrow down the results to just one recruiter.
Creating a Data Access Policy
- Go to Company Settings → Data Access Policies.
- Click Create new policy.
- Select the custom field you want to base the restriction on (e.g. Recruiter, Country, Office).
- Choose the values that apply.
- Assign the policy to one or more users.
- Give your policy a name and click Save.
Viewing dashboards with a Data Access Policy
When a user is assigned to a Data Access Policy:
- The policy name appears in the left navigation bar of their dashboard.
- All data shown will automatically be filtered based on the assigned field and values.
For example: A recruiter linked to Recruiter = Sarah Jones will only see responses from candidates assigned to Sarah Jones.
❗️ Important: Each user can belong to only one Data Access Policy at a time. It’s not possible to switch between different DAP configurations.
✅ Summary
| Type | Filter base | Assigned to | Example use case |
|---|---|---|---|
| Role-level | Username/email | Entire role (e.g. Recruiters) | Recruiters only see their candidates |
| Individual-level | Custom field (e.g. Recruiter, Office, Department) | Specific users | Team Leads see results from their team |
| Access required | “Can create and edit Data Access Policies” | Admins or managers | Create and assign visibility rules |