Users should query the same table but see only rows allowed by a defined tenant-access predicate. Which SQL feature fits?

1. A client-side label with no database enforcement
2. Row-level security
3. TDE alone
4. A nonclustered index alone