Help Center/ Database Security Service/ User Guide/ Database Encryption/ Series 2/ System Administrator Operation Guide/ Dynamic Data Masking/ Linking Discovery Results to Dynamic Desensitization Settings
Updated on 2026-09-24 GMT+08:00
View PDF
Share

Linking Discovery Results to Dynamic Desensitization Settings

The "Link Discovery Results to Dynamic Desensitization Settings" feature links the results of sensitive data discovery/confirmation to the dynamic desensitization settings for respective fields; that is, the desensitization settings for sensitive data are automatically updated based on the discovery results, as shown in Figure 1. This approach significantly reduces the workload associated with configuring desensitization settings for each field individually and helps prevent omissions or incorrect configurations.

Figure 1 Discovery results and desensitization linkage

The specific operations in the system are as follows:

  • Save the result of a sensitive data discovery or confirmation task as a version—e.g., Version A.
  • Automatically map the saved discovery result version to the desensitization configuration. For example: Map Version A to the encryption configuration.

Prerequisite

The sensitive data discovery and confirmation process has been configured and executed; for detailed instructions, please refer to the Sensitive Data Discovery section.

The Discovery Results are Linked to the Dynamic Desensitization settings.

  1. Navigate to the Discovery Results page for sensitive data, as shown in Figure 2.

    Figure 2 Sensitive data discovery/verification result

  2. Click Save; the system will then display a Save Version dialog box, as shown in Figure 3.

    Figure 3 Saving a version
    • Historical versions: Previously saved "historical versions".
    • Save version: Enter a clear and easily recognizable name for the version you wish to save.

  3. Click Save. The system adds a new version, e.g., "Version A", as shown in Figure 4.

    Figure 4 After adding a new save version

  4. Close this window; the system already contains a newly saved version, which can be used for configuring data masking or encryption.
  5. Enter the item that requires data masking configuration.
  6. Select Strategy Desensitization Management, choose the Strategy you wish to edit or create a new Strategy, then select Asset Database.
  7. Select Batch Configuration to access the interface shown in Figure 5.

    Figure 5 Configuring data masking policies in batches

  8. Click Save to complete the configuration of the dynamic data masking Strategy for the corresponding field.
  9. Downloading the Plugin.
  10. Rule Management.
Parent Topic: Dynamic Data Masking