Data Management:Manage data classification templates

Set security levels

Click Security level settings. In the panel that appears, click Add Grade and configure the Security level parameter. For each grade, specify whether to use ciphertext and choose a sensitivity level: low sensitivity, moderate sensitivity, or high sensitivity.

Manage data categories

Add a category

1. In the Data Category section, click the icon and select Add Category.

2. In the Add Category dialog box, configure the Category Name and Parent Node parameters. If no parent node is specified, the category is created at the root level.

3. Click OK.

To add a child category under an existing category, hover over the icon next to the category name, select Add Category, enter a name, and click the icon.

Rename a category

In the Data Category section, hover over the icon next to the category name, select Change, modify the name, and click the icon.

Delete a category

In the Data Category section, hover over the icon next to the category name, select Delete, and click OK in the confirmation message.

Manage identification rules

Create a rule

1. In the Data Category section, click the icon and select Create Rule.

   Alternatively, hover over the icon next to the target category name and select Create Rule.

2. In the Add Custom Identification Rule panel, configure the following parameters:

   Parameter	Description
   Rule Name	A name for the rule.
   Data Category	The category to which this rule belongs.
   Security Level	The sensitivity level to apply when the rule matches. Options: low sensitivity, moderate sensitivity, high sensitivity.
   Identification Model	One or more models used to detect matching fields. Built-in and custom models can coexist in the same template without overriding each other. For details, see Manage detection models.
   Identification Scope	The scope within which the rule scans for matches.

3. Click Submit.

View a rule

Find the rule and click View in the Operation column to see its basic information and identification scope.

Modify a rule

Find the rule and click Modify in the Operation column. After updating the parameters, click Submit.

Delete a rule

Find the rule and click Delete in the Operation column. Click OK in the confirmation message.

To delete multiple rules at once, select the rules and click Batch delete.

Migrate rules to another category

Select the rules you want to move and click Batch Migrate. In the Batch Move dialog box, select the target category and click OK.

Other template operations

Operation	Steps
Preview a template	Click Preview to view the security level, classification, and grading.
Rename a template	Click the icon next to the template and select Modify. In the Modify a template dialog box, update the Template Name and click OK.
Delete a template	Click the icon next to the template and select Delete. Click OK in the Delete Template message.

Method 1: Edit the instance

1. Log on to the DMS console V5.0.

2. In the left-side navigation pane, right-click the instance and select Edit.

3. In the Edit dialog box, select a template from the Classification template drop-down list.

   The Classification template drop-down list is available only when sensitive data protection is enabled for the instance. For details, see Enable the sensitive data protection feature.

4. Click Submit.

5. In the Prompt message, click Scan Now to run a full scan immediately.

   If you click Cancel, existing sensitive data may not match the new template rules because no full scan is performed. To run the scan later, go to Security and Specifications > Sensitive Data > Sensitive Data Assets in the top navigation bar and configure a scan task manually.

6. To view scan results, go to Security and Specifications > Sensitive Data > Sensitive Data Assets in the top navigation bar. In the Overview section, click the number below Scanned to see the count of detected sensitive fields.

Method 2: Configure from Sensitive Data Assets

1. Log on to the DMS console V5.0.

2. Move the pointer over the icon in the upper-left corner and choose All functions > Security and Specifications > Sensitive Data > Sensitive Data Assets.

   In normal mode, choose Security and Specifications > Sensitive Data > Sensitive Data Assets in the top navigation bar.

3. In the Instance List section, click the Enabled tab.

4. Associate a template:

   1. Select the instance and click Configure Identification Template above the list.

   2. In the Configure Identification Template dialog box, select a template from the Classification template drop-down list.

   3. Click OK.

5. Configure a scan task:

   1. Select the instance and click Configure Scan Task above the list.

   2. In the Configure Scan Task dialog box, configure the following parameters:

      Parameter	Description
      Scan Method	When to run the scan. Options: Immediate Task (Task Immediately Run Only Once), Scheduled Task (Task Run at Specified Time Only Once), or Periodic Task (repeating by hour, day, week, or month).
      Scope	The databases to scan. Select All Databases or Specific Databases. If you select Specific Databases, choose one or more databases from the list.
      Apply scan results immediately?	Whether to tag matched fields right after scanning. Select Yes to tag fields immediately, or No (Go to the identification result to apply it manually.) to review and apply results manually.

   3. Click OK.

6. View identification results: in the Overview section, click the number below Scanned to go to the Identification Task Log page. Find the scan task and click the number in the Execution History column to open the Identification Result panel.

   Alternatively, go to the Instance List section, find the instance, and click Task details in the Operations column.

7. If you set Apply scan results immediately? to No, manually apply the results:

   1. On the Identification Task Log page, find the scan task and click the number in the Execution History column.

   2. In the Identification Result panel, click Take Effect in the Actions column.