A LookML developer builds a view that contains sensitive information.

A LookML developer builds a view that contains sensitive information. Only members of the Management group should have access to the view. The developer needs to restrict the view from appearing in the field picker for any Explore where it might be joined for users outside of the Management group.

Which LookML parameter should the developer use to meet this requirement?