{
  "id": "workflow:data-access-request-workflow",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-data-deep.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Data Access Request Workflow",
    "workflowKind": "governance",
    "triggerType": "event-driven",
    "typicalCadence": "per-event",
    "complexity": "cross-team",
    "description": "Manages and audits data access grants across the organization — processing\naccess requests through a structured intake form capturing business\njustification, data classification level, and intended use, routing approvals\nto data stewards and security reviewers based on sensitivity tier,\nprovisioning access through role-based grants with automatic expiration\ndates, logging all grant and revoke events for compliance audit trails,\nconducting periodic access recertification campaigns to remove stale\npermissions, and generating compliance reports for SOC 2 and GDPR data\naccess controls. Produces access request audit logs, recertification campaign\nresults, and compliance posture reports. Excludes data classification\ntagging.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:data-access-request-workflow",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "role:database-administrator",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "role:engineering-manager",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "skill-area:data-governance",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "skill-area:k8s-rbac",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "domain:data-engineering",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "domain:security",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "responsibility:data-quality-monitoring",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "org-unit:data-governance-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:data-access-request-workflow",
      "to": "org-unit:security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}