Overview

To query data that has been masked by masking policies in an unmasked state, you must either request an Unmasking Request through Workflow and receive approval, or be registered as an allowed user in the masking policy. In some environments, even users who have been approved to query in an unmasked state may need to query in an unmasked state only from specific IPs (ranges). To support such environments, the Unmasking Zones feature is provided.

Setting Up Unmasking Zones

To set up Unmasking Zones, you first need Allowed Zones setup.

1. Navigate to Databases > General > Configurations.
2. Change the Unmasking Zones radio button to On and click the + Add Configuration button.

1. Select the Allowed Zone name you want to add to Unmasking Zones.
   
2. Click the Save Changes button to save the changes.

Modifying IPs (Ranges) Registered in Unmasking Zones

Since Unmasking zones settings use Allowed Zones values, to add or change IPs (ranges), you must modify the IPs (ranges) specified in the corresponding Allowed Zone in Allowed Zones. When modified, it is also reflected in Unmasking Zones settings. (Refer to Allowed Zones setup)

Disabling Unmasking Zones Settings

1. Select the specific Allowed zone you want to remove from the Unmasking zones list and click the Delete button.
   
2. Click the Save Changes button to save the changes.