platform-dataspace-access-configure

Configure DataSpace access in Salesforce Data Cloud using a two-layer model:

1. DataSpace-level access — grant a PermissionSet access to a DataSpace by embedding a <dataspaceScopes> element in the permission set XML and deploying via MDAPI.
2. Object-level access (optional) — grant that permission set access to specific DMO / DLO / CIO objects within the DataSpace using the Object Access Grants Connect API.

The MDAPI layer is required to establish the PermissionSet → DataSpace linkage. The Connect API layer is optional and only needed when access should be scoped to specific objects rather than governed entirely by data governance policies.

When to use this skill (routing)

This is the permission-set / RBAC path to Data Cloud access:

• "Grant access to a data space" / dataspace access → this skill (Layer 1, dataspaceScopes on a permission set).
• Grant object access via a permission set / RBAC object grant → this skill (Layer 2, Object Access Grants Connect API).

Object access has a second, separate path — a data-governance access policy (a tag/OLS PolicyRuleDefinition), owned by platform-policy-rule-generate. Infer the mechanism from context; ask only when the request is vague: