Dynamic data masking granular permissions for Azure SQL and Azure Synapse Analytics

Dynamic Data Masking now supports granular permissions. This support is now available for:

• Azure SQL Database,
• Azure Synapse Analytics, and
• Azure SQL Managed Instance

This feature allows you to grant and deny UNMASK permission at the schema-level, the table-level, and the column-level. This enhancement provides a more granular way to control and limit unauthorized access to SQL assets on Azure and improve data security management.

You can read more about this feature towards the end of the doucmentation here: Dynamic data masking - Permissions section