Category Security and RLS

Data-level access control: row-level and object-level security, dynamic RLS with USERPRINCIPALNAME, sensitivity labels, identity, and sharing controls. Designing and testing roles that actually hold up.