Managing Oracle Data Masking Policies

A data-masking policy contains a set of Oracle table columns and the masking strategy to use to hide the data.

You can manage your data-masking policies by performing any of the following operations:

  • Create a new policy
  • Edit an existing policy
  • Clone an existing policy to create a new one

The Commvault software provides different masking strategies based on the type of data that you want to mask.

Data Type

Available Masking Type


  • Shuffling
  • Format-preserving
  • Fixed String


  • Shuffling
  • Numeric Range
  • Numeric Variance





Primary key

Foreign key

Decimal type column

  • Format-preserving
  • Shuffling

For easier management, we recommend that you you have separate data-masking policies for each schema.

Best Practice: To avoid data inconsistencies, use the format-preserving data masking type for Primary Key, Foreign Key data types instead of shuffling.


Data Masking changes are irreversible and might destroy the data.

Before You Begin

  • On the Oracle source and destination client computers, add the sCV_JAVA_HOME additional setting as shown in the following table.










    The Java home path for the Java version that you use for the data masking feature. Include the directory path to the folder that is before "bin".


  1. From the navigation page, click Solutions > DB Instances. Then, in the Actions column for the instance, click the action button action_button, and then click Data masking.

    The Data Masking policies page appears.

  2. Determine the operation that you want to perform.
    • To create a new policy, click Create Policy.
    • To clone a policy, in the row for the policy, click the action button action_button, and then click Clone.
    • To edit an existing policy, in the row for the policy, click the action button action_button, and then click Clone.

    The Create policy or Edit policy dialog box appears.

    If you clone a policy, then the software displays the information from the original policy and adds "_Clone" to the policy name.

  3. In the Policy Name box, type a unique policy name.
  4. From the Schema list, select the schema that you want to mask.

    The software automatically populates the Table list with the tables that are part of the selected schema.

  5. From the Table list, select the table that you want to mask.

    The software automatically populates the Column box with the table columns.

  6. To add data masking for a table, perform the following steps:
    1. In the Column box, click the column that you want to mask.
    2. From the Data Masking Type list, select the data masking type.
    3. If applicable, enter the data masking inputs.
      • If you selected Fixed String then in the Inputs for fixed string box, type the string that the software uses as a replacement.
      • If you selected Numeric range, then under Inputs for numeric range, in the Min and Max boxes, enter the minimum and maximum value the software uses to generate the random number.
      • If you selected Numeric variance, then under Inputs for numeric variance, in the Max percentage box, enter the maximum percent that the software uses to vary the data.
    4. Click Add.
  7. To remove data masking, in the row for the table, under remove, click the remove button delete.
  8. Click Save.

Last modified: 8/14/2018 2:25:37 PM