Question 170
An engineering team prepares row-level controls for lakehouse consumption. The current environment exhibits the following problem: two departmental roles have different row filters and a user belongs to both. Which approach best satisfies this requirement?
Explanation
Correct Answer
Test the effective combined row visibility before approving the dual membership. Multiple grant roles can combine row predicates in a permissive union.
Incorrect Answers
A business user must only see their business unit's sales rows. Data-layer row restrictions apply beyond a single report view.
A display requires partially obscured phone values while authorized data remains stored. Masks alter returned values without changing the source column's contents.
A confidential salary column should never appear in the reader's schema. Column security blocks unauthorized field reads at the data layer.