Data Masking policy error on shared database

Question

I am trying to apply data masking policy on shared database where we have access to only views.However I provided grant to databases also.I am not able to apply this masking policy

here is my code

create or replace masking policy Policy_name as (val string) returns string ->
case
when current_role() in ('SECURITYADMIN') then val
else '*********'
end;

alter table if exists TABLE_NAME modify column PHN_NUMBER set MASKING POLICY Policy_name PHN_NUMBER;

error:

SQL execution error: Creating masking_policy on shared database 'DATABASE_NAME' is not allowed.

Simeon Pilgrim · Accepted Answer · 2021-11-16 19:08:36Z

1

the limitation of DATA MASKING section says you cannot do this.

A data sharing consumer cannot apply a masking policy to a shared database or table. As a workaround, import the shared database or table and apply the masking policy to a local view on that shared table column.

answered Nov 16, 2021 at 19:08

Simeon Pilgrim

26.7k3 gold badges36 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Divya Over a year ago

Thank you simeon for your information.Can we define roles that have access to shared views that may contain PII and manage that at the user access level. Can we limit user level access to those tables or views from a share?Are we able to define any roles and limit the user level access in shared database

Simeon Pilgrim Over a year ago

I cannot answer in absolutes, I just read this section of the manual the other night so knew you cannot MASK on the imported tables directly, but it seems as stated above, that you can add a view to the table and mask on that, and thus move grant permission to the table but to the view thus control access that way.

Divya Over a year ago

Thank you simeon. As it is a shared database we dont have any access for tables as we have only access to views. And we want some way here in this database to mask this PII data or any RBAC needs to be done.Do you have any suggestions

Collectives™ on Stack Overflow

Data Masking policy error on shared database

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related