Managing Oracle Data Masking Policies

A data-masking policy contains a set of Oracle table columns and the masking strategy to use to hide the data.

You can manage your data-masking policies by performing any of the following operations:

Create a new policy
Edit an existing policy
Clone an existing policy to create a new one

The Commvault software provides different masking strategies based on the type of data that you want to mask.

Data Type	Available Masking Type
Character	Shuffling Format-preserving Fixed String
Number	Shuffling Numeric Range Numeric Variance
Date Timestamp Raw	Shuffling
Primary key Foreign key Decimal type column	Format-preserving Shuffling

For easier management of data-masking policies, create separate data-masking policies for each schema.

Best Practice: To avoid data inconsistencies, use the format-preserving data masking type for the Primary Key and Foreign Key data types, instead of shuffling.

warning

Data Masking changes are irreversible and might destroy the data.

Before You Begin

On the Oracle source and destination client computers, add the sCV_JAVA_HOME additional setting as shown in the following table.

For instructions about adding additional settings from the CommCell Console, see Adding an Additional Setting from the CommCell Console.

Property	Value
Name	sCV_JAVA_HOME
Category	OracleAgent
Type	String
Value	The Java home path where you installed Java. Include the directory path to the folder that is before "bin".

Procedure

From the navigation pane, go to Solutions > Databases > DB Instances.

The Instances page appears.
Click the instance.

The instance page appears.
On the upper-right corner of the page, click the menu icon , and then click Data masking.

The Data Masking policies page appears.
Determine the operation that you want to perform.
- To create a new policy, click Create policy.
- To clone a policy, right-click the policy name, and then click Clone.
- To edit an existing policy, right-click the policy name, and then click Edit.
The Create policy or Edit policy dialog box appears.

If you clone a policy, then the software displays the information from the original policy and adds "_Clone" to the policy name.
In the Policy name box, type a unique policy name.
From the Schema list, select the schema that you want to mask.

The software automatically populates the Table list with the tables that are part of the selected schema.
From the Table list, select the table that you want to mask.

The software automatically populates the Column box with the table columns.
To add data masking for a table, perform the following steps:
1. In the Column box, click the column that you want to mask.
2. From the Data Masking Type list, select the data masking type.
3. If applicable, enter the data masking inputs.
  - If you selected Fixed String then in the String box, type the string that the software uses as a replacement.
  - If you selected Numeric range, then in the Min and Max boxes, enter the minimum and maximum value the software uses to generate the random number.
  - If you selected Numeric variance, then in the Max percentage box, enter the maximum percent that the software uses to vary the data.
4. Click Add.
To remove data masking, in the row for the table, under remove, click the remove button .
Click Save.