Guidance for designing a hierarchy of policy tags, which can be applied to table columns to implement column-level access control, and for testing access using monitor-only mode.