You're working with a Microsoft Fabric dataset containing sensitive customer information. You need to ensure that different users can only see their data. Which of the following methods can be used…

Custom workspace roles primarily control access to the workspace artifacts themselves (e.g., viewing, editing reports), not the fine-grained row-level data within a dataset.

Data sensitivity labels classify the nature of the data (e.g., confidential, public) but do not inherently filter individual rows based on the user's identity or permissions.

Azure Active Directory (Azure AD) dynamic groups can be used to manage groups of users for applying RLS rules, but they don't define the RLS logic itself; the RLS rules still need to be configured based on attributes that these groups represent.

Row-level security (RLS) is implemented by configuring rules that filter the rows of data returned based on the identity or attributes of the user querying the dataset. These rules dynamically restrict data visibility, ensuring that users only see the data they are authorized to access, directly meeting the requirement for users to see "their data."