ABAC column mask policies

Unity Catalog ABAC policies that mask sensitive column values at query time on every table whose columns carry matching governed tags, defined once at the catalog, schema or table level. They are separate from the older table-level column masks set with ALTER TABLE, which have been GA since August 2024.

Status and dates are extracted from public sources only. We don't see the private AE-shared roadmap. If something looks wrong, tell us.