Dynamic Data Masking uses the LOYALTY_ROLE symbol to determine whether a user can view unmasked data. The MaskRequired(NonAdministrator) rule sets the LOYALTY_ROLE symbol for the user that sent the request.

Dynamic Data Masking sets the LOYALTY_ROLE symbol to one of the following values:

Administrator
Loyalty_PI_LEVEL_0
Loyalty_PI_LEVEL_1
Loyalty_PI_LEVEL_2
Loyalty_PI_LEVEL_3
Loyalty_PI_DEFAULT_LEVEL

A user with the Administrator loyalty level views unmasked data. A user with the Loyalty_PI_LEVEL_0 level views some masked data. A user with the Loyalty_PI_DEFAULT_LEVEL level views the most masked data.

The MaskRequired(NonAdministrator) rule uses the Java matcher matching method. The class path field contains the location of the DataArchiveAccelerator.jar file and the class name field contains the GetLoyaltyRoleFromComment class.

You can find the DataArchiveAccelerator.jar in the following location:

<Dynamic Data Masking installation>\Accelerators\DataArchive\lib\DataArchiveAccelerator.jar

The rule uses the folder rule action and the continue processing action. If the user that sent the request is not an administrator, the Rule Engine sends the request to the next rule in the tree. If the use is an administrator, the Rule Engine sends the request to the Print Roles rule.