You can selectively mask or block sensitive information based on user privileges. For example, a user has the privilege to access an entity containing employee information through Data Discovery. The entity includes fields for salary and birth date. If the user does not have the privilege to view salaries and birth dates, then the salary and birth date fields appear as Xs instead of the real value.

To prevent a user or application from accessing sensitive data, you must install and configure Informatica Dynamic Data Masking. You define rules in Dynamic Data Masking to specify the data to mask and who to display masked data to.

You can specify how to display masked data. For example, you can choose to replace values partially or completely with randomly generated characters or predefined characters. Or, you can choose to block sensitive fields from appearing in search results or in reports.

When a user queries the Data Vault, the masking rules apply to the search results presented to the user.

After you enable masking, Data Archive protects sensitive information about the user querying Data Vault. Data Archive encrypts the user ID and user access roles in the Data Archive logs and in the query sent to Dynamic Data Masking.