Data Access Groups

DAGs protect confidentiality by limiting record visibility. They complement user roles but do not replace them. Good DAG design requires documented groups, controlled user assignment, reliable record assignment, training, testing, and periodic access review.