A support team should see operational ticket details but not the full customer tax identifier. What is an appropriate data access design?

1. Expose an authorized view or masking policy that limits the sensitive field
2. Hide the field only in one dashboard while preserving unrestricted raw table access
3. Grant raw table access and ask users not to read the field
4. Rename the identifier column to an obscure abbreviation