DAC is typically applied when a *data owner decides appropriate levels* of access. One example of DAC is when the owner of a Google Drive folder shares editor, viewer, or commentor access with someone else. ![[Discretionary Access Control.png]]