rls-multi-tenant
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- Security Validation Scripts: The skill provides a T-SQL test script (tenant-isolation.sql) and a bash command using sqlcmd to run it. These tools are designed to verify that Row-Level Security (RLS) policies are correctly configured and that cross-tenant data access is refused by the database engine.
- Defensive Security Best Practices: The instructions focus on hardening tenant boundaries by explaining the limitations of filter-only predicates and detailing the necessity of block predicates to prevent unauthorized data insertion or modification.
- Audit and Monitoring Guidance: A 'sweep query' is provided to help administrators identify tables lacking appropriate row-level protection. This promotes continuous security posture management for multi-tenant database environments.
- Resource Reference: The skill references official Microsoft documentation for Azure SQL security, and the author (microsoft) uses infrastructure consistent with its own vendor profile, representing standard technical documentation functionality.
Audit Metadata