Use data masking in SQL Server

mask.sql

DROP USER IF EXISTS PeopleReader;
DROP TABLE IF EXISTS People;

CREATE TABLE People
(
    Id INT PRIMARY KEY,
    Name VARCHAR(100),
    SSN VARCHAR(11) MASKED WITH 
        (FUNCTION = 'partial(0,"XXX-XX-",4)')
);

CREATE USER PeopleReader WITHOUT LOGIN;
GRANT SELECT ON People TO PeopleReader;

INSERT INTO People (Id, Name, SSN)
VALUES
(1, 'John Doe', '123-45-6789'),
(2, 'Jane Smith', '987-65-4321'),
(3, 'Alice Johnson', '555-55-5555'),
(4, 'Bob Brown', '111-22-3333'),
(5, 'Charlie Black', '444-44-4444');

EXECUTE AS USER = 'PeopleReader';
SELECT * FROM People;
REVERT;