Data access control: OneLake security vs OLS vs RLS vs sensitivity label vs workspace role
This sheet compares OneLake security role, Object-level security, Row-level security, Sensitivity label, Workspace role.
| Criterion | OneLake security role | Object-level security | Row-level security | Sensitivity label | Workspace role |
|---|---|---|---|---|---|
| Controls | Read access to specific lakehouse tables or folders | Visibility of specific tables or columns in a model | Which rows a user sees | Classification and protection of the item | Broad create, read and write in the workspace |
The verdict, the full comparison, 5 rules and 4 traps are part of DP-600 access. Unlock DP-600.