Skip to main content
Version: 2025.12

Enabling Experimental Infosec Levels

Experimental Feature

This feature is experimental and subject to change. We welcome feedback!

Infosec levels are used to describe access control for classified files. The Istari Platform supports the DOD's infosec schema.


IT Setup

To enable the experimental infosec level feature, add the following environment variables:

Istari Registry Service

FILE_SERVICE_FEATURE_FLAGS_INFOSEC_ENABLED: "true"

Istari Frontend

VITE_INFOSEC_ENABLED: "true"

Enabling Infosec Levels via Admin Panel

  1. An Istari Platform Administrator must enable Infosec Levels via the Admin Panel.
  2. When enabling, the Istari Platform Administrator will set a maximum level and a default level for new resources.
caution

Infosec Levels cannot be disabled after being enabled.


Configuring Maximum and Default Levels

  • The maximum and default level can be changed after initial setup.
  • The Istari Platform will prevent Administrators from downgrading the maximum infosec level below the highest level of any artifact, model, or system within it.
  • The default level can be set at any level up to and including the maximum level.

Granting Infosec Levels to Users

  • All users hold the UNCLASSIFIED infosec level by default.
  • The Istari Platform Administrator may grant an infosec level to users other than UNCLASSIFIED.
  • An unprivileged user cannot view or assign an infosec level that is higher than what has been granted by an Istari Platform Administrator.