> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nx1cloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Assign a role to a tag

> Assign a role to a tag to control access to ingested data.

When you ingest data, you can either select or create a tag. This tag controls access
to the NexusOne features associated with the roles assigned to the tag.

For example, after ingesting a file and creating a tag, you can set a permission boundary to
the tag by restricting the data to use only the Engineer feature. To do that,
you assign the `nx1_engineer` role to the tag.

## Assign a role to a tag

<Tabs>
  <Tab title="Web portal" icon="browser">
    Perform these steps to assign a role to a tag.

    1. Log in to NexusOne.
    2. On the top navigation bar, hover your mouse over **Govern** and then select **Data Access**.
    3. Click **Edit** at the right corner of the "Data Access" table.
    4. Select a role in the **Available Roles** field.
  </Tab>

  <Tab title="CLI" icon="square-terminal">
    Use the following `nx1` command to [get tags on DataHub](/cli-reference/nx1/tags).
  </Tab>

  <Tab title="REST API" icon="code">
    Use the following API endpoints to:

    * [Get tags on DataHub](/api-reference/endpoints/metastore/get-tags).
    * [Create tag associations](/api-reference/endpoints/metastore/create-tag-associations).
  </Tab>
</Tabs>

## Additional resources

For an overview of the Govern feature, refer to [Govern Overview](/documentation/govern/overview).