rcac.md

copyright	lastupdated	keywords	subcollection
years 2014, 2020	2020-02-04		Db2onCloud

{:external: target="_blank" .external} {:shortdesc: .shortdesc} {:codeblock: .codeblock} {:screen: .screen} {:tip: .tip} {:important: .important} {:note: .note} {:deprecated: .deprecated} {:pre: .pre}

Row and column access control (RCAC)

{: #rcac}

{{site.data.keyword.Db2_on_Cloud_long}} comes equipped with powerful user security features that can help you manage security at the row and column level. This is a fine-grained access control feature that is known as row and column access control (RCAC).

{: shortdesc}

RCAC can be used to ensure that your database users can access only the portions of database tables that are required for their work. For example, a hospital might have a policy that states a doctor can see the data of only their patients and not the patients of other doctors. In the following example of a patient data table,

Patient name	Chart	Doctor name
Alice	Aa BB cc	Smith
Bob	aA Bb CC	Chan
Charlie	AA BB CC	Morton
{: caption="Table 1. Patient data table" caption-side="top"}

Dr. Smith is restricted to seeing only Alice's data, as depicted in the following table view:

Patient name	Chart	Doctor name
Alice	Aa BB cc	Smith
{: caption="Table 2. Dr. Smith's view of the patient data table" caption-side="top"}

You can apply RCAC rules to your {{site.data.keyword.Db2_on_Cloud_short}} instance to enforce the hospital's policy.

For more information about RCAC, see RCAC overview{: external}.