You want to show masked values to nonprivileged users, without changing stored data. What fits?
Why B is the answer
Dynamic data masking
Dynamic data masking limits exposure by masking results for nonprivileged users.
In detail
- Dynamic data masking changes what is shown, not what is stored.
- Masking limits exposure in results. It is not encryption.
Use case
An illustrative scenario, not a real incident.
Support staff must confirm a customer by the last four card digits. A mask shows only those, while the full number stays stored.
See it in different ways
mindmap
root((Access))
Workspace
Admin
Member
Contributor
Viewer
Item
Permission on one item
Data
Row-level security
Column-level security
Dynamic data masking
Governance
Sensitivity labels
DomainssequenceDiagram participant P0 as Support user participant P1 as Warehouse participant P2 as Card column P0->>P1: Select card number P1->>P2: Read value P1-->>P0: Masked value
Key point: Masking changes results, not stored data.
Why the other options are wrong
- A. A OneLake shortcut
- A shortcut is about data location.
- C. V-Order on the table
- V-Order is about read speed.
- D. A deployment rule
- A deployment rule changes settings.