Which control hides a salary column from most users in a warehouse?
Why B is the answer
Column-level security
Column-level security restricts columns. Row-level security restricts rows.
In detail
- Column-level security hides a column from users who lack access.
- Row and column security can be combined.
Use case
An illustrative scenario, not a real incident.
HR needs salaries, but other staff use the same employee table. Column-level security keeps the salary column away from them.
See it in different ways
flowchart TD A["Workspace roles"] --> B["Item permissions"] B --> C["Object-level security"] C --> D["Column-level security"] D --> E["Row-level security"]
mindmap
root((Access))
Workspace
Admin
Member
Contributor
Viewer
Item
Permission on one item
Data
Row-level security
Column-level security
Dynamic data masking
Governance
Sensitivity labels
Domainsflowchart TD
Q{"What must be hidden?"}
Q -->|"Some rows"| A0["Row-level security"]
Q -->|"A column"| A1["Column-level security"]Key point: Column-level security restricts columns.
Why the other options are wrong
- A. Row-level security on each of the departments
- Row-level security filters rows, not columns.
- C. A larger capacity for the workspace
- Capacity is about compute.
- D. A shortcut to a different lakehouse
- A shortcut is about data location.