The Data Archive accelerator contains pre-defined masking rules for the Data Archive Loyalty demo database. Use the accelerator rules as a guide to create rules based on the type of data that you want to mask.

You must create a security rule set and add security rules to the rule set. The first rule that you add to the rule set must be a rule like the DataArchiveAction rule that decrypts the user and user roles from the SQL comment that Data Archive appends to the request. The Data Archive accelerator contains an example GenericDataArchiveAction rule that decrypts the SQL comment. Create additional security rules based on the data that you want to mask.

The access roles that you specify in the security rules must match the access roles that you create in Data Archive. You can mask data based on the user name or the Data Archive access role of a user. It is recommended to mask data based on the Data Archive access role.