A system and method to receive a replicated representation of a data entity and a replicated representation of application specific permissions associated with the data entity, the application specific permissions being defined by a source application sourcing the data entity; store the replicated representations of the data entity and the application specific permissions in a dedicated storage space for the source application within a consolidated cloud storage; automatically generate a secured data entity based on an integration of the replicated representation of the application specific permissions with the replicated representation of the data entity; and store the generated secured data entity in the dedicated storage space for the source application.