> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/personas-workflow-for-dlp.md).
# Personas workflow for DLP
The workflow outlines the responsibilities of the data security administrator and data security viewer in identifying and assessing data protection requirements, creating data-in-motion rules, investigating DLP-related issues, and protecting the organization's assets and data properties.
Data security administrator
The data security administrator views and manages all data security information, including objects and data patterns.
They are responsible for creating and managing [data-in-motion rules](/cortex-xsiam/protect-your-endpoints/endpoint-dlp/configure-dlp-end-to-end.md#create-data-in-motion-rules) and identifying and investigating DLP-type threats and attacks within an organization.
**Steps**:
1. Configuring Endpoint DLP Settings: Configure the settings according to your organization's needs.
2. Configuring sensitive data definitions: Identify and classify sensitive data (Data Profiles and Data Patterns).
3. Configuring policies: Set rules to apply for sensitive data.
4. Investigate: Review and analyze DLP-related issues to gather information to reduce false positives, refine policies, and improve incident response and auditing.
5. Refine policies: Adjust DLP rules to improve accuracy, reduce false positives, and address new risks.
Data security viewer
The data security viewer reviews and analyzes DLP-related issues to gather information that will help reduce false positives, refine policies, and improve incident response and auditing.
**Steps**:
1. Investigate and remediate: For true incidents, stop the data loss and investigate what happened and why.
2. Document and report: Create a record of the incident for legal and compliance purposes.
3. Communicate and educate: Speak to the user involved and update security training to prevent future issues.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/protect-your-endpoints/endpoint-dlp/personas-workflow-for-dlp.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.