Tutorial: Step-by-Step Guide to Data Masking

You can configure the masking policies from UI or via API. Check out this GitOps example to see how to codify the masking policies.
Configure Dynamic Data Masking
- Workspace-level admins configure the Global Masking Rule, Semantic Types, and Masking Algorithm.
- Project-level owners configure the Column Masking on the table column. This is only needed when the global masking rule is not applicable to a particular project.
- Workspace-level admins or project-level owners grant Masking Exemption to the users to access the unmasked data.
Determine whether to mask data

Masking precedence
- Masking Exemption. If user has been granted exemption, the data will not be masked.
- Global Masking Rule. If no exemption is granted, the global masking rule will be applied.
- Column Masking. If no global masking rule is configured, the column masking will be applied.