Row and column security is a data access control method that limits what a user can see in a report, dashboard, or database query. Row security hides entire records based on rules such as role, department, tenant, or ownership. Column security hides specific fields, such as email addresses, grades, salaries, or identifiers. In practice, one analyst may see all rows but only non-sensitive columns, while another may see only the rows assigned to their team.
This control matters because analytics tools often sit close to production data and can expose far more than a single chart. In a breach or misconfiguration, strong row and column rules reduce the amount of sensitive data an attacker can steal, especially if reporting credentials are compromised. Defenders use these controls with least-privilege accounts, query filters, and permission checks inside business intelligence platforms to prevent broad data leaks from internal dashboards and exported reports.