RCAC is a data-security feature that limits data access to those users who have a real business need to access the data. This feature is also known as fine-grained access control (FGAC).
You can implement RCAC by using the following database objects:
- Row permission: Specifies a row-access control rule for a specific table and describes what set of rows a user has access to, based on an SQL search condition
- Column mask: Specifies a column-access control rule for a specific column in a table and describes what column values a user is permitted to see and under what conditions, based on an SQL case statement expression
