An Employee table contains FirstName, LastName, Dept, and Salary columns. You enable a user to access the Employee table but restrict the user from accessing the salary column.

To restrict the user from the salary column, disable the Data Integration Service and enter an infacmd similar to the following command:

infacmd sql SetColumnPermissions -dn empDomain -sn DISService -un Administrator -pd Adminpass -sqlds employee_APP.employees -t Employee -c Salary gun -Tom -dp SQL_Select

The following SQL statements return NULL in the salary column:

Select * from Employee
Select LastName, Salary from Employee

The default behavior is to return null values.