QueryDatasetScope

The columns that bound a dataset's records to a caller: the tenant, the isolation boundary every caller scope pins, optionally the owner and space, and the tags AbacQueryPolicy restricts by.

A table without a tenant column, such as most tables of an enterprise warehouse, is declared platform-level instead (dataset platform design §5.2): every record belongs to the platform tenant (0), so a caller scoped to that tenant reads them all and a caller scoped to any other tenant reads none. It is never open to every tenant. Exactly one of tenant and platform is declared.

Each ABAC tag key is bound to its own column, a string (one value per record) or an array of strings (several); a record without the tag holds an empty string or an empty array there. A principal tag key the dataset binds no column for is a tag no record carries.