Analysts must see only their assigned region in a supported SQL serving layer. Which control addresses this?

1. Row-level security using the appropriate identity mapping
2. A report-page filter as the only safeguard
3. A sensitivity label alone
4. A descriptive column alias