In data sharing, a data sharing provider cannot create a masking policy in a reader account.

• A. I can create a masking policy in a reader account
• B. A data sharing consumer can create a masking policy in a reader account
• C. A data sharing provider cannot create a masking policy in a reader account
• D. Masking policies are not related to reader accounts

Answer: (C)

Masking policies are defined in the account that owns the data and apply to objects there. In data sharing, the provider account owns the shared data and enforces its masking policy on those shared objects. The reader account cannot create or modify masking policies for the provider’s data inside the reader account. That’s why the data sharing provider cannot create a masking policy in a reader account. The reader account’s interactions with masking relate to how it consumes or views the shared data, not to creating policies on the provider’s objects.