1. Latest Release Home
  2. Guides
  3. Concepts
  4. Tools
  5. References
  6. Integrations
  7. Data applications
  8. Data Governance
    1. Data Catalog
    2. Data Quality
    3. Data Masking
      1. Tools
        1. Data Masking Manager
    4. Policy Center
    5. External Assets
  9. Release Notes
  10. Incorta Premium
  11. Release Support Policy
  12. Release Model

Tools → Data Masking Manager (Preview)

About Data Masking Manager

The Data Masking Manager provides a centralized and structured way to define, manage, and enforce data masking rules across columns and glossary terms, ensuring sensitive data is protected while remaining usable for analytics.

Note

The Data Masking Manager is available starting 2026.5.0.

Important
  • Starting 2026.5.0, any Data Classification entry in the Data Catalog that had the Data Masked toggle enabled is automatically migrated along with its exception groups to the new Data Masking tab under Data Governance.
  • Migrated rules follow the naming format: _Migrated_<ClassificationName>
  • The rule description includes the full path of the associated terms

Data Masking Manager Access Permissions

Users with the SuperRole or Data Governor role can create and manage masking rules.

→ To access the Data Masking Manager, in the Navigation bar, select Data Governance → Data Masking.

Data Masking Manager Anatomy

The Data Masking Manager consists of the following:

Action bar

The Action bar has the following options:

  • + New menu with the following available options:
    • Masking Rule
    • Import Rules
  • More Options (⋮) menu with the following available option:
    • Export

Toolbar

The toolbar provides controls to explore and manage policies:

ControlDescription
Search barA text box for finding masking rules by name
Filter barFilters to refine masking rules by Status, Applied At, Exception Groups, and Created By
Item countDisplays the total number of masking rules
Refresh iconRefreshes the masking rules list

List view

Each masking rule appears as a row in the list view. The following table shows the available properties:

PropertyDescription
NameThe masking rule name
DescriptionA brief explanation of the masking rule
ActivatedThe masking rule state: Active (default) or Inactive.
Note: When inactive, the associated data is unmasked.
Applied AtIndicates whether the rule is applied at the term or column level, along with the number of assigned terms or columns (values above 99 are displayed as 99+)
Exception GroupsDefines which users are excluded from masking. Users in these groups see unmasked data. If no exception group is specified, the data is masked for all users
Last ModifiedThe date and time the masking rule was last modified
Created ByThe display name of the user who created the masking rule
  • The default sort in the list view is ascending by Name.
  • To change the sort order for masking rules, select the Name, Status, Last Modified, or Created By column heading, then change the arrow to point down to sort in descending order, or up to sort in ascending order.

Data Masking Manager Actions

Using the Data Masking Manager, you can perform the following actions:

Create a masking rule

To create a new masking rule:

  1. In the Action bar, select + New → Masking Rule.
  2. In the Create Masking Rule dialog:
    • Enter a unique Name
    • Enter the masking rule description
    • Enable the Activated toggle to activate the masking rule
    • Assign the rule
      • In the Data Assets tab, under Schemas or Business Schemas, select specific columns to mask.
      • In the Glossary Terms tab, select terms to mask.
        Note:
        • Columns without a directly assigned active masking rule inherit masking from the associated term
        • Active column-level rules take precedence over term-level rules
        • If a column has an inactive rule, it inherits the term’s masking rule
      • In the Exception Groups tab, select groups that can view unmasked data
  3. Select Create.
Masking labels
  • Orange label: Indicates the masking rule is active and directly assigned to the column
  • Blue label: Indicates the masking rule is active and inherited from the glossary term
  • Gray label: Indicates the masking rule is inactive
Note
  • If you apply a masking rule to a column or term that already has an assigned rule, you are prompted to either ignore the new assignment or overwrite the existing rule.
  • Within the Data Catalog:
    • You can view, edit, and add masking rules assigned to terms under Glossary Terms, in the Masking Rule section of the Information Panel.
    • You can view, add, and edit masking rules assigned to columns under Schema or Business Schema → Table or View → Columns Tab. Select + under Masking Rule, select a rule from the dropdown, then select Confirm.

Edit a masking rule

To modify an existing masking rule:

  1. Open the masking rule.

  2. In the Action bar, select More Options (⋮) → Edit.

  3. Update any of the following fields as needed:

    • Name
    • Description
    • Activated
    • Assigned columns or terms
    • Exception Groups

  4. Select Save.

View information panel

To view the masking rule’s information panel:

  1. Open the masking rule.
  2. In the Action bar, select the Information (i) icon.
    The information panel displays:
    • General: Description, Applied At, Status, Created By, and Last Modified
    • Exception Groups: List of groups excluded from masking

Import masking rules

To import masking rules:

  1. In the Action bar, select + New → Import Rules.
  2. Upload a .zip folder containing masking rules. The uploaded folder will be validated.
  3. Select Import.

Export masking rules

To export masking rules:

  • In the Action bar, select More Options (⋮) → Export.
    The masking rules are exported as a data_masking_rules.zip folder.

Delete a masking rule

To remove a masking rule:

  • Select the Delete (trash) icon next to the masking rule, or
  • Open the masking rule, then in the Action bar, select More Options (⋮) → Delete.

Audit masking rules

All masking rule changes are auditable in the maskingrules directory, accessible from Data → Local Data Files → data_catalog_audit, improving transparency, traceability, and visibility by providing a clear record of every change.