Described are techniques for configuring storage access control. A set of inputs including a first identifier of an initiator port and a device set devices in a data storage system is received. Responsive to receiving the set of inputs, an allowable path set is automatically defined for the initiator in accordance with an initiator-level of granularity. Each device in the device set is accessible by the initiator over each path in the allowable path set. The allowable path set includes paths between the initiator port and each target port of the data storage system. A set of target ports is either specified using a wildcard indicator denoting all target ports of the data storage system, or the set of target ports is otherwise determined implicitly as all target ports of the data storage system.