Data Management (DMS) lets you manually raise or lower the sensitivity level of table fields directly from the SQLConsole tab. Use this when the automatic scan misclassified a field, or when a business change means a field no longer requires the same level of protection.
Prerequisites
Before you begin, make sure you have:
Sensitive data protection enabled for your database instance. See Enable the sensitive data protection feature
Usage notes
After you adjust sensitivity levels, the following rules apply:
Display: Medium and High sensitivity fields on which you have no permissions appear as asterisks (
*) or in a custom masked format on the SQLConsole tab.Access: To query, export, or change Medium or High sensitivity fields, apply for the required permissions.
Approval: A database administrator (DBA) or DMS administrator can configure special approval processes for exporting or changing data that contains Medium or High sensitivity fields.
Approval behavior:
Raising the sensitivity level is automatically approved.
Lowering the sensitivity level requires approval based on the configured process.
For details on sensitivity levels, see Field sensitivity level.
Adjust the sensitivity level
Log in to DMS 5.0.
In the top navigation bar, choose .
NoteIf you use the DMS console in simple mode, move the pointer over the
icon in the upper-left corner of the console and choose . In the Please select the database first dialog box, search for the database instance, select it from the results, and click Confirm.
Adjust the sensitivity level using one of the following methods:
Right-click menu: Right-click the table name and choose Sensitive Data > Security level adjustment. Adjust the sensitivity level of the fields, then click Submit for Security Department Approval.
Table details: Click the
icon in the upper-right corner of the database instance details page. Locate the table, then choose More > Security level adjustment in the Actions column. Adjust the sensitivity level of the fields, then click Submit for Security Department Approval.
What's next
View masked data: Query the adjusted fields on the SQLConsole tab. See the Query data section of "Manage a database on the SQLConsole tab."
Manage access: Grant or revoke user permissions to query, export, and change sensitive fields. See Manage sensitive data.
Adjust via Sensitive Data List: Make bulk adjustments from the Sensitive Data List page. See Manage sensitive data.
Use the API: Call an API operation to adjust the sensitivity level programmatically.