How can I enforce user/team-level data access restrictions when using Metabase MCP without column-level security?
I’m currently integrating Metabase MCP with an AI assistant and want to make sure that users can only ask questions about data they are authorized to access. My current source is Clickhouse and would want to know what is the best way to go about this
My desired setup is something like:
-
Users belong to different teams/groups.
-
Each team should have access to a specific subset of data.
-
Depending on the authenticated user and their team, the MCP/AI assistant should only return information that the user is actually authorized to see.
-
Ideally, this restriction should apply both to rows and sensitive columns, so that the AI cannot expose information that the user shouldn't have access to.
The challenge is that column-level security / row and column security is not available on my current Metabase plan.
