Configure Data Masking

This video takes you through the masking configuration process:
tdm46
HID_configure_data_masking
On the Configure page, you can select which Masking Functions CA TDM uses to mask your data. For a full list of masking functions available in Fast Data Masker, see Masking Functions and Parameters.
This video takes you through the masking configuration process:
 

 
There are two views available for this page:
View by Table
The page consists of a table, with the following columns:
  •  
    Table
    Name of the table in the Data Model.
  •  
    Columns to be masked
    Number of columns in this table with PII tags. For more information on how tags are assigned to columns, see Scan Data Model for PII.
  •  
    Where
    This indicates that at least one of the columns from this table uses a WHERE clause.
  •  
    Edit
    Make changes to a table's tags and masking functions.
Each row in the table represents a table in the Data Model. Click the plus icon next to the name of a table to show the 
Expanded Table View
.
Expanded Table View
The expanded view shows a table underneath the name of the Data Model table you clicked. It contains the following columns:
  •  
    Column
    Name of the column in the Data Model table
  •  
    Primary Tag
    The first tag assigned to this column.
  •  
    Mask Function Group
    The Mask Function Group that CA TDM applies to the column. The Mask Function Groups available from the dropdown menu are those associated with the primary tag. The default Mask Function Group is the one that provided the best match to the classifier seedlist.
    You can assign and create other Mask Function Groups to a column with the 
    Edit
     (pencil) icon. Click the 
    +
     icon to create a copy of the Mask Function Group currently assigned to this column.
  •  
    Where
    This column contains a tick when the Mask Function Group contains at least one masking function that uses a WHERE clause.
  •  
    Edit Mask Function Group
    Click the pencil icon in this column to open the 
    Edit Mask Function Group
     dialog, to add and make changes to the masking functions CA TDM applies to the column.
     You can only make changes to custom Mask Function Groups. If you try to edit a Classifier-defined Mask Function Group, the dialog's title is 'Mask Function Group - Locked'. You can click 
    Make Copy & Edit
     to make a copy of this Mask Function Group that you can edit.
     From this dialog, you can:
    • Change the 
      Name
       of the Mask Function Group. If you check 
      Make Function Group Global
      , changes you make apply to all instances of this Mask Function Group.
    • For each masking function in the Mask Function Group:
      • Select the function from a drop-down list of available masking functions.
      • Add values to parameters applicable to the selected masking function, or select a seedlist for functions that take a seedlist as their parameter.
         For functions that take a seedlist as their parameter, you can add seedlists from a database table. For more information, see Add Seedlists from a database table.
      • Click
         Add a WHERE Clause
         for the function, to further customise the masking process.
        This displays a field in which you can add an SQL WHERE clause, which column values must match in order for FDM to apply the masking function.
      • Click the 
        X
         icon to remove the masking function from the Mask Function Group. Click 
        Yes
         to confirm this decision.
    • Add additional masking functions to the Mask Function Group by clicking the plus (
      +
      ) icon inside the dialog. These functions execute sequentially, in the order in which they appear in this dialog. When you have more than one masking function, you can change their execution order with the 
      Up
       and 
      Down
       chevron icons.
  •  
    Add
     
    Mask Function Group
    Click the 
    +
     icon in this column to add a Mask Function Group.
    From this dialog, you can:
    • (Optional) 
      Copy Function Definition
       from a dropdown list of existing Mask Function Groups. When you select one, the Mask Function Group Name field populates with 'Copy of <Mask Function Group name>'.
    • Change the name of the Mask Function Group. If you check 
      Make Function Group Global
      , changes you make apply to all instances of this Mask Function Group.
    • For each masking function, you can:
      • Select the function from a drop-down list of available masking functions.
      • Add values to parameters applicable to the selected function, or select a seedlist for functions that take a seedlist as their parameter.
         For functions that take a seedlist as their parameter, you can add seedlists from a database table. For more information, see Add Seedlists from a database table.
      • Click
         Add a WHERE Clause
         for the function, to further customise the masking process.
        This displays a field in which you can add an SQL WHERE clause, which column values must match in order for FDM to apply the masking function.
      • Click the 
        X
         icon to remove the masking function from the Mask Function Group. Click 
        Yes
         to confirm this decision.
    • Add additional masking functions to the Mask Function Group by clicking the plus (
      +
      ) icon inside the dialog. These functions execute sequentially, in the order in which they appear in this dialog. When you have more than one masking function, you can change their execution order with the 
      Up
       and 
      Down
       chevron icons.
View by Tag
The page consists of a table, with the following columns:
  •  
    Tag
    Name of the tag in the data model.
  •  
    Columns to be masked
    Number of columns with this tag assigned, that also have a Mask Function Group assigned. If you assign multiple masking functions to columns with this tag, this value includes the number of different functions assigned.
  •  
    Mask Function Group
    Mask Function Group that CA TDM applies to columns with this tag. This first displays the tag's default Mask Function Group. If you choose to mask columns with this tag, with different masking functions, this field displays 'Multiple functions'.
  •  
    Where
    This indicates that at least one of the columns with this tag uses a WHERE clause.
  •  
    Edit
    Make changes to the Mask Function Group associated with a tag.
Each row in the table represents a tag in the Data Model. Click the plus icon next to the name of a tag to show the 
Expanded Tag View
.
Expanded Tag View
The expanded view shows a table underneath the name of the tag you clicked. It contains the following columns:
  •  
    Tag
    Name of the tag in the data model.
  •  
    Columns to be masked
    Names of columns with this tag.
  •  
    Mask Function Group
    The Mask Function Group that CA TDM applies to the column.
     The Mask Function Group that is displayed first is the default Mask Function Group for that tag. You can change this Mask Function Group from other Mask Function Groups associated with the column's primary tag.
  •  
    Where
    This indicates that this column table uses a WHERE clause.
  •  
    Edit Mask Function Group
    Click the pencil icon in this column to open the 
    Edit Mask Function Group
     dialog, to add and make changes to the masking functions CA TDM applies to the column.
     You can only make changes to custom Mask Function Groups. If you try to edit a Classifier-defined Mask Function Group, the dialog's title is 'Mask Function Group - Locked'. You can click 
    Make Copy & Edit
     to make a copy of this Mask Function Group that you can edit.
     From this dialog, you can:
    • Change the 
      Name
       of the Mask Function Group. If you check 
      Make Function Group Global
      , changes you make apply to all instances of this Mask Function Group.
    • For each masking function in the Mask Function Group:
      • Select the function from a drop-down list of available masking functions.
      • Add values to parameters applicable to the selected function, or select a seedlist for functions that take a seedlist as their parameter.
         For functions that take a seedlist as their parameter, you can add seedlists from a database table. For more information, see Add Seedlists from a database table.
      • Click
         Add a WHERE Clause
         for the function, to further customise the masking process.
        This displays a field in which you can add an SQL WHERE clause, which column values must match in order for FDM to apply the masking function.
      • Click the 
        X
         icon to remove the masking function from the Mask Function Group. Click 
        Yes
         to confirm this decision.
    • Add additional masking functions to the Mask Function Group by clicking the plus (
      +
      ) icon inside the dialog. These functions execute sequentially, in the order in which they appear in this dialog. When you have more than one masking function, you can change their execution order with the 
      Up
       and 
      Down
       chevron icons.
  •  
    Add
     
    Mask Function Group
    Click the 
    +
     icon in this column to add a Mask Function Group.
    From this dialog, you can:
    • (Optional) 
      Copy Function Definition
       from a dropdown list of existing Mask Function Groups. When you select one, the Mask Function Group Name field populates with 'Copy of <Mask Function Group name>'.
    • Change the name of the Mask Function Group. If you check 
      Make Function Group Global
      , changes you make apply to all instances of this Mask Function Group.
    • For each masking function, you can:
      • Select the function from a drop-down list of available masking functions.
      • Add values to parameters applicable to the selected function, or select a seedlist for functions that take a seedlist as their parameter.
         For functions that take a seedlist as their parameter, you can add seedlists from a database table. For more information, see Add Seedlists from a database table.
      • Click
         Add a WHERE Clause
         for the function, to further customise the masking process.
        This displays a field in which you can add an SQL WHERE clause, which column values must match in order for FDM to apply the masking function.
      • Click the 
        X
         icon to remove the masking function from the Mask Function Group. Click 
        Yes
         to confirm this decision.
    • Add additional masking functions to the Mask Function Group by clicking the plus (
      +
      ) icon inside the dialog. These functions execute sequentially, in the order in which they appear in this dialog. When you have more than one masking function, you can change their execution order with the 
      Up
       and 
      Down
       chevron icons.