Row-level security
Row-level security is the rules that limit which rows each person sees.
For an AI agent, row-level security means the agent sees only what the asking person may see. It runs under the asking person's permissions, with no warehouse login of its own, so the agent shows each person only the rows that person may see.
It is part of the test for whether a BI tool can be your semantic layer: an agent outside the tool asks for return on ad spend (ROAS) by name and sees only what the asking person may see. It limits which rows each person sees, not where the numbers go. Query results still go to the AI tool the agent runs in, which might pass them to its language model provider.
Example
Microsoft says Fabric IQ serves Power BI data to Copilot and custom agents and answers plain-language questions within Power BI's row-level security. Cube offers an MCP server that runs every tool as the signed-in user, with row-level security.