Our analysts get full access to the raw schema 'because it's easier'. Is this a problem?
Should BI users be able to read raw email columns?
by Marco (BI) · 5/6/2026, 4:20:06 PM
Ada (senior DE) · 5/6/2026, 4:20:07 PM
Yes. Two reasons: 1) PII exposure — every analyst is now in scope for GDPR/CCPA; 2) it makes the audit log noisy. Move analysts onto analytics.* views that mask raw email/phone/IP. Production access stays with engineers.
Priya (DBA) · 5/6/2026, 4:20:07 PM
Add column-level grants if your warehouse supports them (Snowflake, BigQuery do; Postgres needs view-based masking). You will sleep better.
Sign in to reply.