For details, see Permissions for querying encrypted columns below. Make sure you have enabled Always Encrypted for the database connection for the Query Editor window, from which you will run a SELECT query retrieving and decrypting your data. This will instruct the.NET Framework Data Provider for SQL Server (used by SSMS) to decrypt the encrypted columns in the query result set.