Dataphin:Project security policies

Limitations

• You cannot install project security policies for projects, including realtime projects, if their associated compute engine only supports data desensitization using built-in database functions.

• If the compute engine supports both data desensitization using built-in database functions and the security policy algorithm package, you have the following options:

  • If you only use built-in database functions for data desensitization, you do not need to install a project security policy.

  • If you want to use advanced Data Masking Functions, you must install a project security policy.

Permissions

Security administrators can edit project security policies.

Configure project security policies

1. On the Dataphin homepage, choose Governance > Data Security from the top navigation bar.

2. In the left navigation bar, select General Settings > Project Security Policy to go to the Project Security Policy page.

   The Project Security Policies page lists information about the security policy of each project in Dataphin, including the project name, business unit, project mode, compute source type, and the installation and activation status of the asset security policy. The compute source type indicates the project's associated compute engine and determines whether a security policy algorithm package can be installed.

3. Click Edit in the Actions column for the target project. In the Edit Project Security Policy dialog box, you can modify the project security policy.

   Parameter	Description
   Project name	By default, the names of projects in the Basic, Dev, and Prod environments are displayed.
   Asset security policy	When installed, this policy enables data security features such as sensitive data identification and data desensitization. By default, the policy is installed when a project is created. After a successful installation, you can update the policy or change its status. If the asset security policy is not yet installed, click Install. If the asset security policy is already installed, you can view the installation log or update it to the latest version. If the asset security policy (project-level and function-level) is being installed, you can view the installation log or cancel the installation. If the compute source type associated with the project does not support installing the security policy algorithm package, the asset security policy status is Unsupported Compute Source Type, and the policy cannot be installed. You can update multiple security policies in bulk. Select the policies that you want to update and click Update at the bottom of the page. The system then installs or updates the selected asset security policies.
   Policy status	Controls whether the asset security policy is active. If disabled, the security policy has no effect.

4. Click OK to apply your changes.