I need to create a restricted view in my Foundry environment that prohibits a specific user or group of users from viewing a particular column in a dataset. I managed to compose a granular policy that prohibits specific users to view particular rows, but for columns I am unable to do that; so I would love to hear your thoughts on that.
Hello and thank you for reaching out! We do not have currently have column level restricted views as a fundamental primitive throughout Foundry. There are messy ways to work around this, eg. exponentially exploding your datasets but this may be infeasible depending on the number of columns you want to be restricted.
Another approach for implementing column-level controls is to use Cipher. You can create a Cipher Channel and use it to obfuscate specific columns of data with the “Cipher Encrypt” expression in Pipeline Builder. Only authorized users – those who have access to a Cipher License with decrypt permissions from that same Cipher Channel – will be able to de-obfuscate the data from those columns.
You can do this for objects: https://www.palantir.com/docs/foundry/object-permissioning/multi-datasource-objects