> >

Column Level Permissions

Enterprise Edition only

Creating a Virtual Dataset with Column Masking

By using query_user() or is_member(), a virtual dataset can be setup to allow for selective masking of columns for different users and/or groups without having to create multiple datasets.

The following is a sample SQL for a virtual dataset with column masking:

SELECT 
    CASE 
        WHEN query_user() IN ('dave','mike') OR is_member('Accounting') THEN SSN
        ELSE CONCAT('XXX-XX-',SUBSTR(SSN,8,4))
    END
FROM ss.crm.dbo.employees

is_member() is case-insensitive. Alternatively, is_member(groupname, <case-sensitivity boolean>) can be used with the case-sensitivity flag set to true.