Security Best Practices¶
Row and Object Level Security¶
- Apply Row-Level Security (RLS) to limit data access at the row level
- Use Object-Level Security (OLS) to hide sensitive tables or columns
Classification and Access Control¶
- Apply Sensitivity labels to classify and protect content
- Apply least privilege for access to workspace and items
- Reserve Admin/Member/Contributor roles for those who need edit permissions (RLS/OLS doesn't apply)
Data Loss Prevention and Auditing¶
- Enable Data Loss Prevention (DLP) policies to enforce organizational security policies
- Monitor audit logs to track sensitivity label changes and data access activities