A reporting application should show each tenant only its own rows in a shared analytical table. Which approach best fits?

1. Inspect data with Sensitive Data Protection and review classification findings.
2. Apply supported column-level access controls or policy tags.
3. Use supported row-level security with correctly scoped identities.
4. Use an appropriate deterministic pseudonymization or tokenization approach with controlled key access.