Data engineering·Governance, privacy and meaning
everyone can query the customer table and only three people can select the date-of-birth column.
Column-level security
Also calledcolumn masking policy, field-level access
Access control applied per column rather than per table. It is what makes broad access to a wide table safe, and it pairs naturally with classification tags so the policy is written once against the tag. Its practical limitation is that derived tables do not inherit it — a model selecting a protected column into a new table has quietly laundered the control unless the platform propagates tags.