When you configure result set masking for a Microsoft SQL Server stored procedure with numeric, string, or date data types, you create two security rule sets. The first rule set must contain a rule that identifies the procedure call as a valid procedure call with a result set that you want to mask. This rule uses the Procedure Call matcher and the Process Result action. The Procedure Call matcher specifies the exact name of the stored procedure, and the Process Result action specifies the name of the second rule set that you create.