Data Masking Policies

Overview

To safeguard sensitive or personal information within your organization, you can establish policies to ensure that such data is appropriately masked when viewed. Utilizing the Data Masking feature, you can create policies tailored to specific connections, enabling you to register and manage masking rules on a column-by-column basis, thereby ensuring the protection of sensitive data.

Create a Data Masking Policy

Register a new masking policy by connection.

1. In the Database Settings menu, navigate to Policies > Data Masking menu.

2. Click on the Create Policy button located in the upper-right corner.

3. Enter the necessary information to create the policy:

   1. Policy Name : Provide a descriptive name for the policy.

   2. Target Connection : Select the connection to which the policy will be applied. Note that each policy can be associated with only one connection.

4. Save your changes by clicking the Save button.

Once saved, you will be able to view the newly created policy in the Data Masking policy list.

Register a Rule in a Data Masking Policy

After creating a policy, follow these steps to register the path to the data and apply the policy as a rule:

1. Navigate to the Data Masking menu and click on the policy you created.

2. The Policy Details and Rule Registration screen will appear. Click the Add Rule List button on the right.

3. Select the paths of data to which you want to apply the policy:

   1. Database Name : Provide the required value for rule registration.

   2. Table Name : Provide the required value for rule registration.

   3. Column Name : Provide the required value for rule registration.

4. Apply a masking pattern:

   1. Select one or more masking patterns to apply to the columns you selected in step 3.

   2. By default, there are 20 different patterns available for masking personal and sensitive information.

   3. You can also create custom detection and masking patterns through regular expressions in the Masking Pattern menu.

5. Make exceptions to masking rules for users or groups that need to see that data:

   1. Allowed Users : Select the users or groups you want to exempt from this rule.

6. Save your changes by clicking the Ok button.

On the Rule List tab, you can view the registered rule. Now, when a user views that data, it will be masked based on the applied masking pattern. (e.g. "*****@gmail.com")

Q. When selecting Database Name, the error "[ENGINE] [30101] Please Check the user credential or IP ACL settings. Access denied for user 'username'@'host' (using password: YES)" occurs.

A. It is likely that the DB account information is either not set or set incorrectly. To address this:

1. Navigate to the Database Settings > DB Connections menu.

2. Click on the connection information associated with the database.

3. Enter the correct Database Username and Password information.

4. Save the changes.

5. Retry the operation.

Related Topics

• Masking Patterns

• Table/Column Access Restriction Policies

• Sensitive Data Policies

• Alert Policies

Back to DB Access Policies