dg.md

1. Create Rules for Data Masking and Obfuscating

1. Click navigation menu then expand Governance and then click Rules.

2. Click Add rule -> New rule

Select Data protection rule

3. Add rule for Email Address masking. Select Data Class as Email Address to Redact the data as shown in image below

Once Rule has been created, you can see it in Rules page

4. Create rule for last name obfuscation

Select Data protection rule

Select Data Class as Last Name to Obfuscate the data as shown in image below

Once Rule has been created, you can see it in Rules page as well.

5. Go to navigation menu and expand Governance and then click Categories create category.

Click Add category

Give a name (eg PII_CATEGORY)

Once Category has been created you will be redirected to newly created PII_CATEGORY page.

6. Click navigation menu then expand Governance and then click Business Term to create a new Business Term.

Click Add business term

Give a name to business term and attach category to it.

Publish Business Term

7. Go to navigation menu and expand Governance and then click Policy to create new policy.

Create Policy and attach PII_CATEGORY to the policy.

8. Add both rules in Data Protection rules of Policy and then add business term as well to this policy and Publish Policy.

9. Go back to catalog and open reshaped asset and then click on plus (+) icon in the Governance artifacts ->Business terms as showm in below image.

Select Pii_Business_Term to the catalog

Verify business term has been added to the catalog

10. Go back to the catalog which you have created and click Access control tab and click Add collaborators +

11.Add datascientist user which might have received during this lab as collaborator with Viewer role.

With the above all steps you have successfully created data masking and obfuscating rules to protect sensitive data. also with the last step you have provided access of governed data to data scientist. Now let's follow below steps to see whether data scientist receive masked data or not.

12. Login using datascientist or developer credential to see masked Email Address and obfuscated last name.