Labels are an additional piece of metadata you can add to Tabular resources.

Labels provide a method for analyzing and searching your Tabular resources like tables. They can also be used for controlling certain behaviors like columnar data masking.

SEE ALSO: Masking and hiding sensitive data.

Labels are defined per organization and generally include:

  • a name
  • a description
  • a set of policies which control the behavior of resources the label is applied to (optional)

In much the same way you use Tabular’s RBAC system of data access controls, you assign label access permissions on a role-by-role basis to do things like:

  • Create and edit labels
  • Apply labels to resources
  • Assign label privileges to other roles

Basic label privileges include:

  • CREATE_LABEL - an organization-level privilege to allow authorized parties to create labels. Authorized initially to EVERYONE.
  • MODIFY_LABEL - a label privilege allowing rename/modify/delete on the label.
  • APPLY_LABEL - a label privilege allowing the application of the label to resources for any of a range of purposes.

Labels are distinct from Apache Iceberg tags which are named references to table snapshots.