

# Managing data filters
<a name="managing-filters"></a>

To implement column-level, row-level, and cell-level security, you can create and maintain data filters. Each data filter belongs to a Data Catalog table. You can create multiple data filters for a table, and then use one or more of them when granting permissions on the table. You can also define and apply data filters on nested columns that have `struct` datatypes allowing users to access only sub-structures of nested columns.

You require `SELECT` permission with the grant option to create or view a data filter. To allow principals in your account to view and use a data filter, you can grant the `DESCRIBE` permission on it.

**Note**  
Lake Formation doesn't support granting `Describe` permission on a data filter, which is shared from another account.

You can manage data filters by using the Amazon Lake Formation console, the API, or the Amazon Command Line Interface (Amazon CLI).

For information about data filters, see [Data filters in Lake Formation](data-filtering.md#data-filters-about)