Control which rows a user can see (row-level security) 2. **Column Masks** — Control what values a user sees in specific columns (column-level masking)