Question

A global sales company stores all order records in a single table. Regional analysts should only see rows for their own region, while a global compliance team must see all rows. The security team wants to enforce this filtering automatically at query time without maintaining separate tables or views per region. Which Snowflake governance feature should they implement?

Accepted Answer

A row access policy that evaluates the current user's role and returns matching regional rows

Answer

A masking policy applied to the region column so unauthorized values are hidden

Answer

Object tags on the table that classify rows by region for automatic filtering

Answer

A secure view for each region combined with future grants to regional roles