On SQL Server 2022, an analyst already has SELECT on dbo.Customer. Email and Phone use dynamic data masking. The analyst must see the real Email values while Phone stays masked, with no additional modification rights. Which permission should you grant?