I want to mask all user privilege both Admin or owner cannot view mask table.

Question

Dear Sir/Madam

https://learn.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=sql-server-ver16

Refer to link Official Microsoft above, Administrative users or roles such as sysadmin, serveradmin, or db_owner have CONTROL permissions on the database by design, and can view unmasked data.

So I would like to mask all user privilege both Admin or owner cannot view mask table.

Is it possible to mask table?

Regard & Thank

Srean

Answer 1

Hi，@Srean Noem

Sysadmin and owner that you mentioned are database roles ，which are essentially user properties. You cannot modify the permissions that the roles themselves have, you can only modify the roles of users.

Additionally, dynamic masking technology only disguises the original data at the presentation layer and does not restrict access to the original data for other users with appropriate permissions. If sensitive data is involved and access must be restricted to only the owner, it is recommended to use data encryption techniques such as symmetric encryption.