Can a user set a Column-level Security masking policy on a table or view column with the APPLY MASKING POLICY privilege?

• A. False
• B. It requires the APPLY MASKING POLICY privilege on the account
• C. True
• D. It cannot be granted

Answer: (C)

Applying a masking policy to a column is controlled by the APPLY MASKING POLICY privilege on the target table or view. If a user (via their role) has this privilege on the object, they can attach an existing masking policy to that column, enabling Column-level Security for that data. This privilege is granted on the specific object, not automatically on the entire account, and it works in conjunction with the policy existing (and the user typically needing USAGE on the policy as well). So yes, a user can set a Column-level Security masking policy on a table or view column when they hold the APPLY MASKING POLICY privilege on that object.