Starburst Galaxy’s column masks let you control how a column’s value is displayed to affected users. A column mask can be added to a policy. Column masks are created from the Column masks pane.
See Access control policy > Column masks for more details.
Use the Column masks pane to view the list of column masks and their properties, as well as to create, edit, and delete column masks.
The Column masks navigation menu link is only visible to users whose active
role set includes the
The Column masks pane lets you view a list of your column masks including useful information such a description, use count, and ownership.
Use the Search column masks field to find column masks that match your
search term. For example, you can search
accountadmin to find column masks
owned by the
The following columns are displayed:
To reorder the column mask view, click a column name to sort by that column. Click the column name again to reverse the sort order.
To create a column mask:
selected by default.
Enter an expression in the Column mask expression field. This expression
is the output that appears to users when the mask is applied, written as a
regular expression. You can write a string in double quotes such as
contents" to mask all values as that string, or you can write a statement
@column to extract the value and wrap it in a series of functions and
operators to customize the output that appears to the user.
For example, a column mask expression to hide string values with a
hash can be done using the following expression:
lower(to_hex(sha256(to_utf8(cast("@column" as varchar)))))
BIGINT type column that uses
functions to produce a
TEXT value is invalid and causes the query to fail.
To edit an existing column mask:
To change the column mask’s owner:
To delete a column mask:
Column masks are applied to policies upon policy creation or when editing a policy.
See Manage data access > Creating policies for more information.
Is the information on this page helpful?