Use the Security Rule Set Simulator to test a Dynamic Data Masking security rule before you use it in production.
In the Management Console, open a security rule set.
In the Rule Editor, select the rule, folder, or rule set that you want to test.
For example, if you want to test the entire rule set, click the rule set name. If you want to test rules in a rule folder, click the folder name. If you want to test a single rule, click the rule name.
Click
Action
Security Rule Set Simulator
.
The
Security Rule Set Simulator
opens.
Enter the following database details:
DDM Database Name
The name of the database that you saved in the Management Console tree.
DBA Username
The name of the database user that you want to use to connect to the database. The user should be a privileged user that has access to all the tables in the database. Generally it is the user that you used to connect to the database in the Management Console.
If you want to test the rule for a non-privileged user, enter login information for a privileged user and enter the non-privileged username in the AUTH_USERNAME symbol in the
Symbol Definition
box.
DBA Password
The password for the database user.
Optionally, enter one or more symbol values in the
Symbol Definition
box. The simulator lists the global symbols. To add a symbol, click the plus (+) button.
If you want to validate whether the security rule works for a non-privileged user, enter the database user name of the non-privileged user as the AUTH_USERNAME symbol value.
Enter the SQL statement that you want to use to test the rule or rules.
Click
Run
.
The simulator runs and displays the log information in the
Log Output
box.
If you want to save the simulator configuration and the log output, click
Save File
. Dynamic Data Masking does not save the simulator log output to the Dynamic Data Masking log files.