James, the lead system administrator, has successfully integrated the organization’s Active Directory to handle user logins and has assigned standard…

Fine-grained data-access controls restrict which underlying information a user can retrieve independent of their global role. By enforcing data-level entitlements (e.g., finance-only forecasts), James can keep the employee’s “User” designation while preventing exposure to sensitive datasets inside the AI application.

A. Content filtering removes or redacts returned text but does not prevent the initial query from reaching restricted data.

C. Role-based access would require creating a new role; the task is to keep existing roles.

D. Feature controls toggle application functions, not the visibility of specific datasets.

1. Microsoft Azure AI “Data Access and Isolation” guide, §“Fine-grained access control,” 2023.

2. Google Cloud “IAM Conditions for AI Platform,” Concepts §2, 2022.

3. University of Washington CSE 446 Lecture 14, “Data Governance in ML Systems,” slide 7, 2021.