> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bytebase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Global Masking Rule

<Info>
  Masking precedence: [Masking Exemption](/security/data-masking/access-unmasked-data) > [Global Masking Rule](/security/data-masking/global-masking-rule) > [Column Masking](/security/data-masking/column-masking).
</Info>

Admins may want to batch apply masking settings globally. e.g.

* Mask all data in production
* Mask all data for database under a specific project
* Mask data conditionally according to [Data Classification](/security/data-masking/data-classification)

Global masking rule along with [Semantic Types](/security/data-masking/semantic-types) allows you to do this. It's similar to the iptables where you configure an ordered
rule list. The first matching rule will be applied. If no rule matches, no `Semantic Type` will be applied.

<Note>
  Global masking rules are not supported for document databases (**MongoDB** and **Elasticsearch**). Configure masking per-collection/per-index instead — see [Document Database Masking](/security/data-masking/document-database-masking).
</Note>

Certain roles can set global masking rules to mask the data:

* Built-in roles: `Workspace Admin`, `DBA`.
* [Custom roles](/administration/roles): `bb.policies.createMaskingRulePolicy`, `bb.policies.updateMaskingRulePolicy`, `bb.policies.deleteMaskingRulePolicy`.

1. Go to **Data Access**>**Global Masking**.
2. Click **Add**. Click **+Add condition** or **+Add condition group**, set **Semantic Type** and then click **Confirm**.
   <img src="https://mintcdn.com/dbx/hVml3kA8vNK6vcVL/content/docs/security/data-masking/bb-global-masking.webp?fit=max&auto=format&n=hVml3kA8vNK6vcVL&q=85&s=e9e12b267a607c70f419a633f5f1c9db" alt="bb-global-masking" width="2084" height="1090" data-path="content/docs/security/data-masking/bb-global-masking.webp" />
3. Repeat to add more rules.

   <img src="https://mintcdn.com/dbx/hVml3kA8vNK6vcVL/content/docs/security/data-masking/bb-global-masking-2.webp?fit=max&auto=format&n=hVml3kA8vNK6vcVL&q=85&s=6430ebac9233eb36b54ee176bd5bba4f" alt="bb-global-masking-2" width="2088" height="1084" data-path="content/docs/security/data-masking/bb-global-masking-2.webp" />

   Combined with [Semantic Types](/security/data-masking/semantic-types), here is the result you will get in **SQL Editor**.

   <img src="https://mintcdn.com/dbx/yhR4_AKNF_MEUOA1/content/docs/security/data-masking/bb-sql-editor-full-masking.webp?fit=max&auto=format&n=yhR4_AKNF_MEUOA1&q=85&s=9d8f6f23838a3154eff8c36720665267" alt="bb-sql-editor-full-masking" width="1398" height="616" data-path="content/docs/security/data-masking/bb-sql-editor-full-masking.webp" />