Which action helps ensure a report can be run by a user without exposing sensitive fields?

• A. Grant access at the data source level
• B. Ensure the user has access to the fields used in filters
• C. Disable the report for all users
• D. Remove fields from the report

Answer: (B)

Access to the specific fields used in the report’s filters determines whether a user can run the report without exposing sensitive data. If a user doesn’t have permission to those fields, the filters can’t be evaluated for that user, and the report may be blocked or return incomplete results. Ensuring the user has access to the fields used in filters allows the report to run while still enforcing security on what the user can see. Granting access at the data source level is too broad and can reveal restricted data in the report; disabling the report or removing fields from it addresses different problems and doesn’t directly ensure safe execution for the user.