If you want to define an LDAP user that receives masked or unmasked data, define the user in the LDAPActualUser rule.

If you want to define LDAP groups that receive masked data or users with LDAP attribute values that you want to receive masked data, enable the BlackList folder and disable the WhiteList folder. Use the BlackListGroups rule to mask data based on LDAP groups. Use the BlackListAttributeName and BlackListAttributeValues rules to mask data based on attribute values.

If you want some LDAP groups to receive unmasked data or you want users with certain LDAP attribute values to receive unmasked data, enable the WhiteList folder and disable the BlackList folder. Use the WhiteListGroups rule to allow users in an LDAP group to view unmasked data. The groups that you define in the WhiteListGroups rule receive unmasked data. The groups that you do not list in the WhiteListGroups rule view masked data. Use the WhiteListAttributeName and WhiteListAttributeValues rules to allow users with certain LDAP attribute values to view unmasked data.