OverviewHow access, row level filter, and masking policies decide which data each person can see and query.›Grant data accessCreate an access policy that lets users, groups, or service accounts read or change a catalog, schema, or table.›Edit or delete a policyChange who a policy applies to and what it allows, pause it, or delete it to revoke access.›Filter rowsShow each user, group, or service account only the rows of a table that match a condition.›Mask columnsHide sensitive column values, such as phone numbers or IDs, from selected users, groups, or service accounts.›Query access auditSee whether each data access in a query was allowed or denied, and which Data Security policy was involved.›Access permissionsThe permissions you can grant in an access policy at catalog, schema, table, and function level, and what each one allows.›