Metabase row and column security
Showing each group or customer only their rows and columns with Metabase row and column security (formerly data sandboxing): attribute-based row filters versus custom SQL views, and multi-tenant use.

Metabase governance and administration features buyers weigh when choosing between open source and paid self-hosted plans.
Showing each group or customer only their rows and columns with Metabase row and column security (formerly data sandboxing): attribute-based row filters versus custom SQL views, and multi-tenant use.
Delegating Metabase data permissions to roles defined in PostgreSQL, Snowflake, SQL Server and other databases, so database row-level security applies to both SQL and query builder questions.
Exporting Metabase content as YAML and importing it into other instances for staging to production promotion, version control or regional copies, with the CLI and API options and what is not carried across.
Running a dev-to-production analytics workflow with Metabase Remote Sync: building content in a read-write instance, reviewing it in Git pull requests, and letting a read-only production instance pull changes.
Initializing self-hosted Metabase Pro or Enterprise from a config.yml with users, databases and settings, and how it differs from environment variables when UI changes collide.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.