A user has the appropriate privilege to see unmasked data in a column. If the user loads this column data into another column that does not have a masking policy, what will occur?

Question

Options

• AUnmasked data will be loaded in the new column.
• BMasked data will be loaded into the new column.
• CUnmasked data will be loaded into the new column but only users with the appropriate privileges
• DUnmasked data will be loaded into the new column and no users will be able to see the unmasked

• A
  87% (26)
• B
  7% (2)
• C
  3% (1)
• D
  3% (1)

Explanation

Snowflake's dynamic data masking policies operate at query time, not at storage time. When a user with the privilege to view unmasked data runs a query and loads that data into a new column (e.g., via INSERT INTO ... SELECT), they are seeing and transferring the actual, unmasked values. The new destination column has no masking policy attached to it, so the unmasked data is written as-is and will be visible to all users who can query that column. Masking policies do not follow data as it moves - they only apply to the specific column they are assigned to at the time of a query.

No community discussion yet for this question.