Overview

When you need to verify original data for items masked by masking policies in DAC, you can request temporary mask removal from administrators through Workflow. Mask removal can be requested through Workflow, or through the Unmasking Request menu that appears when you right-click on masked data in the web SQL editor.

Requesting Unmasking

1. Selecting Approval Rules

• Select an Approval Rule to choose the appropriate approval rule for your purpose. The approval target varies depending on the selected rule.
• If a pre-configured approval rule is selected, the approver is automatically assigned and cannot be added or modified.
• Approval Expiration Date: Enter the approval expiration date. The maximum value can be set through Maximum Approval Duration. The Approval Expiration Date cannot exceed the Unmasking Expiration End Date. If exceeded, the request cannot be submitted.
  • However, when submitting in Urgent Mode, the above condition is ignored.

2. Assigning Approvers

• Click the + button in the approval line to display a popup window where you can assign step-by-step approvers.
• In this popup window, add approval conditions and approvers, then click the Save button to save the approval line.
• Available approval conditions are as follows:
  • A single Assignee can complete the approval request: The approval request is approved with just one approval from multiple people.
  • All Assignees must approve this request: All approvers must approve for the approval request to be approved.

3. Assigning Reviewers

• Click the + button in the approval line to display a popup window where you can assign reviewers.
  • If the administrator has not allowed reviewer assignment, the Reviewer box will not be displayed.
• In this popup window, add approval conditions and approvers.
• Click the Save button to close the modal and complete reviewer assignment.

4. Sending Request with Post-Approval

• If you select an approval rule that allows post-approval functionality, the Urgent Mode switch will be displayed.
• After setting Urgent mode = On and registering the approval request, you can immediately receive permissions or perform tasks.

5. Entering Request Details

• Title: Enter the request title.
• Connection: Select the connection that contains the column for which you want to request mask removal.
• Column: You can select one or more columns, up to a maximum of 30 columns.
• Unmasking Expiration: You can set the period for which you want to request mask removal.
  1. When selecting Time Duration, you can input in minutes, with a minimum of 1 minute and a maximum of 44,640 minutes.
     1. For Time Duration, it operates based on the approval time.
     2. When using Urgent Mode, you can view unmasked data based on the request registration time.
  2. When selecting End Date, you can select based on date and time, with a minimum of the current time and a maximum of 30 days.
• Comment: Enter the reason for requesting mask removal.
• Click the Submit button at the bottom of the page to submit the request.