title: Dynamic Data Masking: Looking for options or techniques to limit unmasking data to a stored procedure call
body: <p>Currently, I can mask/unmask data with the approach explained here:</p>
  
  <p><a href="https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=azuresqldb-current" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=azuresqldb-current</a></p>
  
  <p>I am looking for options to limit unmasking data to stored procedure calls only.</p>
  
  <p>That means non-dbo users always get masked data. Only the ones has right to call a stored proc can get unmasked version of the data. </p>
  
  <p>I am using SQL Azure, but I am hoping to find a technique that work consistent accross the SQL Server product line.  </p>