BigQuery Access Control: Row & Column Security Done Right
Most growth-stage companies running BigQuery give everyone too much access. Here is how to implement row-level and column-level security that scales with your team.
Fintel Analytics blog
Expert perspectives on data analytics, AI agents, internal tools, and business intelligence from the Fintel Analytics team.
10 of 206 posts
Most growth-stage companies running BigQuery give everyone too much access. Here is how to implement row-level and column-level security that scales with your team.
Most dbt BigQuery teams grant dataset-level IAM instead of using authorized views — here's why that breaks security and exactly how to fix it.
Unmasked PII in BigQuery is a compliance and security risk most teams discover too late. Here's how to find it in under five minutes using SQL against INFORMATION_SCHEMA.
Too many people, and too many dbt jobs, run as ACCOUNTADMIN. Use these Snowflake queries to find them and fix it safely.
A BigQuery service account key committed to a dbt repo is a live credential, not a tidy-up task. Find it, rotate it and remove it for good.
Building data masking logic inside dbt models is one of the most quietly dangerous patterns in a growing warehouse. Here's why it breaks — and how to fix it.
BigQuery column-level encryption lets you protect PII and financial data at the field level — but wiring it correctly into dbt without breaking downstream models is harder than the docs suggest.
Over-broad BigQuery IAM grants are the most common—and most quietly dangerous—misconfiguration in fast-growing data teams. Here's how to find them in under five minutes.
Multi-tenant SaaS analytics is one of the most under-engineered parts of a B2B product. Get the architecture wrong and you risk data leaks, broken dashboards, and a rebuild at scale.
Fraud costs businesses billions every year. Discover how anomaly detection and data analytics are transforming fraud prevention strategies in 2026.