Skip to main content
Masking precedence: Masking Exemption > Global Masking Rule > Column Masking.
Admins may want to batch apply masking settings globally. e.g.
  • Mask all data in production
  • Mask all data for database under a specific project
  • Mask data conditionally according to Data Classification
Global masking rule along with Semantic Types allows you to do this. It’s similar to the iptables where you configure an ordered rule list. The first matching rule will be applied. If no rule matches, no Semantic Type will be applied. Certain roles can set global masking rules to mask the data:
  • Built-in roles: Workspace Admin, DBA.
  • Custom roles: bb.policies.createMaskingRulePolicy, bb.policies.updateMaskingRulePolicy, bb.policies.deleteMaskingRulePolicy.
  1. Go to Data Access>Global Masking.
  2. Click Add. Click +Add condition or +Add condition group, set Semantic Type and then click Confirm. bb-global-masking
  3. Repeat to add more rules. bb-global-masking-2 Combined with Semantic Types, here is the result you will get in SQL Editor. bb-sql-editor-full-masking