14,494 questions
No, if you only want masking for certain rows, you cannot do that with Dynamic Data Masking. DDM will mask all values in a column.
Dynamic Data masking at Row level
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 30%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVR%3C/text%3E%3C/svg%3E)
Vinay Reddy
0
Reputation points
Currently we have a static Data masking implemented based a case statement like below:- Create View "view_name" AS Select Column1, Case when (column10 = 1) then column 2 else 'XXXX' end as column2, column3, column4 From "Table_name" **As you can see above for column 2 we have applied Masking based on a value in a column10 at view level. ----Now we want to explore if the same case statement can be applied for DYNAMIC DATA MASKING---- Please advice.
SQL Server Other
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2023-04-04T09:20:03.79+00:00 Hi @Vinay Reddy A V The case when statement is a condition judgment. I understand your example, but I don't quite understand the 'dynamic' you want to explore. Can you explain further?
-
Vinay Reddy 0 Reputation points
2023-04-04T10:12:57.46+00:00 Dynamic Data Masking limits data exposure by masking based on user login. Kindly refer to the link below.
https://learn.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=sql-server-ver16
Sign in to comment
2 answers
Sort by: Most helpful
-
Erland Sommarskog 121.4K Reputation points MVP Volunteer Moderator2023-04-04T22:08:50.0533333+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 76%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVR%3C/text%3E%3C/svg%3E)
Vinay REDDY 0 Reputation points2023-04-11T03:25:08.8566667+00:00 Hi, Thank you for the reply. The below link (step-3) is shown a case statement to apply DDM at Row level. But can we apply it at Microsoft SQL or not. Please advice https://safe.menlosecurity.com/https://thinketl.com/snowflake-dynamic-data-masking/
-
Erland Sommarskog 121.4K Reputation points MVP Volunteer Moderator
2023-04-11T20:59:15.59+00:00 No, that syntax is not available in SQL Server.
However, if I understand the example correctly, you can achieve that particular case with help of the UNMASK permission in SQL Server. That is users who have UNMASK permission on table or the column (available only in SQL 2022), will see the value unmasked.
By the way, as I understand the Snowflake example, I am not sure that your requirement is implementable in Snowflake.
Sign in to comment -
-
Anonymous
2023-04-06T07:51:23.09+00:00 Hi @Vinay Reddy There is this line in the official document you posted, which indicates that DDM acts on the column. It doesn't seem to work with the case statement, and your idea doesn't seem to be realizable.
I also checked out a nice post with a detailed explanation of DDM usage. https://www.red-gate.com/simple-talk/databases/sql-server/t-sql-programming-sql-server/encrypting-sql-server-dynamic-data-masking/
-
Vinay REDDY 0 Reputation points
2023-04-11T03:24:57.1166667+00:00 Hi, Thank you for the reply. The below link (step-3) is shown a case statement to apply DDM at Row level. But can we apply it at Microsoft SQL or not. Please advice https://safe.menlosecurity.com/https://thinketl.com/snowflake-dynamic-data-masking/
Sign in to comment -