# Palantir Object-Level Security **Entity class:** Granular ontology access-control mechanism **Architecture:** [[wiki/Signals, Silos, and Sovereign Software|Signals, Silos, and Sovereign Software]] ## Definition **Palantir Object-Level Security** uses object and property policies to enforce row-, column-, and cell-level visibility in ontology-backed applications. ## Modern Defense and Cybersecurity Role Object-level security lets users collaborate through the same operational model while seeing only the instances and properties authorized for their identity, organization, mission, classification, and purpose. ## Chronological Proximity The mechanism became increasingly important as Palantir moved from analyst workstations to shared enterprise applications and AI agents operating directly over the Ontology. ## Relational Proximity [[wiki/Palantir Security Markings|Security markings]] provide mandatory controls and propagation; granular policies compare user attributes and object values; [[wiki/Microsoft Entra ID|external identity providers]] can supply enterprise identity context. ## Collection Routes [[collections/The Civilian Intelligence Marketplace|The Civilian Intelligence Marketplace]] · [[collections/Terrorism, Counterterrorism, and the Intelligence Environment|Terrorism, Counterterrorism, and the Intelligence Environment]] ## Sources / Provenance - [Primary documentation](https://www.palantir.com/docs/foundry/object-permissioning/managing-object-security)