Data Access Controls

Data Access Controls policies determine who can access specific data and under what conditions across Snowflake, Databricks, and OLTP data sources.

In this section

• Data Masking — Alter what a query returns for a connected column or tag, based on the querying user’s role, while still returning the row.
• Access Management Policy — Control which roles can access schema objects on Snowflake and sidecar-connected data sources, granting or blocking access to whole objects such as databases, schemas, and tables.
• Row Access Policy — On Snowflake, control which rows of a table each role can see, removing non-matching rows from the result entirely.
• Impersonation Policy — On OLTP data sources, let multiple users share a database login without sharing credentials, controlling which database login a user connects with.

You create and manage every policy type from the Policy page in ALTR. You configure alerts directly on a masking policy’s rules — see Policy Alerts.