Updated on 2024-04-29 GMT+08:00

Viewing Sensitive Data Distribution

This section describes how to view and modify the sensitive data discovery result.
  • View the result of a sensitive data discovery task.
  • Manual recovery: After sensitive data is discovered, you must perform manual recovery to confirm that the identification rule in the task is in valid state so that the identification rule takes effect for static masking tasks.

    If you selected Manually synchronize the recognition result for the sensitive data discovery task, you must click Data Sync to synchronize the discovered sensitive data to Data Map. (Before synchronizing data, ensure that a metadata collection task has been performed in DataArts Architecture. Otherwise, the synchronization will fail.)

Prerequisites

  • You have created and executed a sensitive data discovery task. For details, see Creating a Sensitive Data Discovery Task.
  • Only the DAYU Administrator, Tenant Administrator, or data security administrator has the permission to synchronize sensitive data to Data Map.
  • Before synchronizing sensitive data, you have collected the metadata of the data connection in DataArts Catalog. For details, see Metadata Collection Task. Otherwise, the synchronization will fail and an error message will be displayed, indicating that no data connection is available.

Constraints

  • Currently, sensitive data can be synchronized only to Data Map. Sensitive data cannot be synchronized to DataArts Catalog, and sensitive data security levels and classifications cannot be added or edited in DataArts Catalog.
  • Sensitive data synchronization depends on metadata collection tasks. If the metadata of a data connection has not been collected, no data connection can be found.

Viewing and Modifying the Sensitive Data Discovery Result

  1. On the DataArts Studio console, locate an instance and click Access. On the displayed page, locate a workspace and click DataArts Security.

    Figure 1 DataArts Security

  2. In the navigation pane on the left, choose Sensitive Data Distribution.

    Figure 2 Sensitive Data Distribution page

  3. On the Sensitive Data Distribution page, you can use either of the following methods to view and modify the sensitive data discovery result. Method 1 is recommended. It allows you to view and modify the discovered sensitive data, change the data security level and classification, and perform batch operations without switching to other pages.

    1. (Recommended) On the Sensitive Data Distribution tab page, click to expand data source details, view sensitive data, and change the data security level, classification, and status.
      • OK: Confirm that the identification result is valid. You can confirm rules in unconfirmed or invalid state. Static masking tasks can be executed using valid identification rules.
      • Ignore: Confirm that the identification result is invalid. You can ignore rules in valid state. Unconfirmed or invalid identification rules cannot be selected for static masking tasks.
      • Data Sync: If you selected Manually synchronize the recognition result for the sensitive data discovery task, you must click Data Sync to synchronize the discovered sensitive data to Data Map. (Before synchronizing data, ensure that a metadata collection task has been performed in DataArts Architecture. Otherwise, the synchronization will fail.)
      • Delete: Delete the discovered result.
      Figure 3 Viewing and modifying the discovered sensitive data

    2. Click the Data Discovery tab. Search for a data source and click View in the Operation column to view details of the sensitive data.
      Figure 4 Data discovery
      Figure 5 Viewing details

      Click the Manual Recovery tab, search for and locate a rule, and click OK, Ignore, or Data Sync in the Operation column to change the data status.
      • OK: Confirm that the identification result is valid. You can confirm rules in unconfirmed or invalid state. Static masking tasks can be executed using valid identification rules.
      • Ignore: Confirm that the identification result is invalid. You can ignore rules in valid state. Unconfirmed or invalid identification rules cannot be selected for static masking tasks.
      • Data Sync: If you selected Manually synchronize the recognition result for the sensitive data discovery task, you must click Data Sync to synchronize the discovered sensitive data to Data Map. (Before synchronizing data, ensure that a metadata collection task has been performed in DataArts Architecture. Otherwise, the synchronization will fail.)
      Figure 6 Modifying sensitive data