Source
Access control, administration & portability — found from sitemap — Metabase
Checked for Metabase on 1 Nov 2026
- Page
- https://www.metabase.com/docs/latest/permissions/row-and-column-security
- Checked
- 1 Nov 2026, 09:30 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:f3843cc4ed7e3fb3416862456ecbb2f6475ef89812d1e5dc24afb7ded979dafa
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Row column security plans Report an error
“Row and column security is only available on Pro and Enterprise plans (both self-hosted and on Metabase Cloud).”
-
Row column security purpose Report an error
“Row and column security lets you give granular permissions for different groups of people. You can change what data a group can view, as well as what data a group can query with the query builder.”
-
Row column security former name Report an error
“Row and column security was formerly called data sandboxing. It’s the same feature, it just now has a more descriptive name.”
-
Row column security policy limit Report an error
“You can define up to one row and column security policy for each table/group combo in your Metabase.”
-
Row column security restrict rows single column Report an error
“Restrict rows by filtering on a single column ✅ ✅”
-
Row column security restrict rows multiple columns Report an error
“Restrict rows by filtering on multiple columns ❌ ✅”
-
Row column security restrict columns Report an error
“Restrict columns ❌ ✅”
-
Row column security edit columns Report an error
“Edit columns ❌ ✅”
-
Row security user attribute requirement Report an error
“User attributes are required for row security, and optional for column security.”
-
Row security user attribute match Report an error
“The user attribute value must be an exact, case-sensitive match for the filter value.”
-
Column security prerequisites Report an error
“A group of people. An admin-only collection, with collection permissions set to No access for all groups except Administrators. A SQL question with the rows and columns to be displayed to the people in the group, stored in the admin-only collection.”
-
Column security question must be sql Report an error
“Use a SQL question to define the exact rows and columns to be included in the custom view. Avoid using a query builder (GUI) question, as you might accidentally expose extra data, since GUI questions can include data from other questions or models.”
-
Column security edited column schema Report an error
“If you edit a column, the schema of the SQL question (the question you want to display instead of the table) must match the schema of the original table. That means the “Edited Accounts” SQL question must return the same number of columns and corresponding data types as the original Accounts table. You cannot add columns.”
-
Column security parameters must be required Report an error
“The question should be written in SQL. If the question contains parameters, those parameters must be required (they cannot be optional).”
-
Row column security multiple ids via comma separated Report an error
“If you want to give someone access to multiple user IDs (e.g., the person should see rows for both User_ID 1 and 2.), you can set up a user attribute, like user_id that can handle comma-separated values like “1,2”.”
-
Row column security max one policy per person per table Report an error
“You can add a person to a maximum of one row and column security policy per table (via the person’s group).”
-
Row column security conflict resolution Report an error
“Remove the person from all but one of the groups. Set all but one of the group’s View data access to the database to “Blocked”.”
-
Row column security sql results not secured Report an error
“Row and column security permissions don’t apply to the results of SQL questions. That is, SQL questions will always display results from the original table rather than the secured table.”
-
Row column security public sharing not secured Report an error
“Row and column security permissions don’t apply to public questions or public dashboards.”
-
Row column security native query bypass Report an error
“Groups with native query permissions (access to the SQL editor) can bypass row and column security”
-
Row column security limited to query builder Report an error
“Row and column security is limited to the query builder. You can’t set up native query permissions for groups with row and column security.”
-
Row column security mongodb druid row only Report an error
“MongoDB and Druid only support row-level security. Neither supports column-level security.”
-
Row column security slack alerts blocked Report an error
“People in groups with row and column security can’t create Slack alerts or dashboard subscriptions. Email alerts and subscriptions are still available.”
-
Row column security actions blocked Report an error
“If row and column security applies to a person on any table in a database, that person can’t run actions on that database.”
-
Row column security public action forms not checked Report an error
“Public action forms don’t check row and column security. An admin can make any action public, even on a database where row and column security applies to some groups, and anyone with the link can then run the action.”
-
Row column security requires login Report an error
“Metabase can only create row and column security using the group membership or user attributes of people who are logged in.”
-
Impersonation related feature Report an error
“To enforce row-level permissions with the native query editor, check out impersonation.”
-
Row column security custom view mechanism Report an error
“To restrict rows and columns, you can use a SQL question to filter the table. When someone views that table, they’ll instead see the question’s results, not the raw table.”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The Data Analyst Access control, administration & portability
- The Finance Controller Access control, administration & portability
- The IT Administrator Access control, administration & portability
- The Managing Director Access control, administration & portability
- The SaaS Product Lead Access control, administration & portability
- The Skeptic Sharing, scheduled reports & embedding
- The Skeptic Access control, administration & portability
- The Skeptic Pricing transparency