Update Sensitive Data Models
There are many reasons why you may need to update a sensitive data model after you discover sensitive columns on your target database. Perhaps changes on the database have occurred or you may need to fine-tune the discovery results. With Data Discovery, you can perform incremental discoveries and make manual changes to your sensitive data model.
You can also manually edit the XML version of a sensitive data model in a text editor. To obtain an XML format of your sensitive data model, you need to generate it first and then download it from the sensitive data model's page. See Download or Upload a Sensitive Data Model in XML Format.
Perform an Incremental Discovery of Sensitive Data on Your Target Database
If columns are added, deleted, or modified on your target database after you run a data discovery job, you can perform an incremental discovery to update your sensitive data model. This operation compares the sensitive columns in your sensitive data model to those on the target database and informs you of the differences. If needed, you can adjust the schemas and sensitive types that Data Discovery uses during the incremental discovery on the target database.
View the History of Incremental Discovery
Data Discovery maintains a history of each incremental discovery job on a sensitive data model (SDM). For each job, you can view when the incremental discovery was performed, the selected schemas for the incremental discovery, the selected sensitive types, what column changes were approved or rejected, and whether the changes were applied to the SDM.
Add New Sensitive Columns to a Sensitive Data Model
You can add new sensitive columns to an existing sensitive data model on the sensitive data model's page.
Add Previously Removed Columns to a Sensitive Data Model
You can view the list of previously removed columns from a sensitive data model (SDM) and add those columns back to the SDM as needed.
Remove Sensitive Columns from a Sensitive Data Model
Sometimes Data Discovery returns columns that you do not want to include in your sensitive data model. You can remove them from the sensitive data model on the sensitive data model's page.
Update Sensitive Type for a Sensitive Column
Learn how to change the sensitive type of a sensitive column directly from the sensitive data model.
Add or Remove a Referential Relationship from a Sensitive Data Model
You can add or remove a referential relationship between database columns in your sensitive data model.
Referential relationships are leveraged in operations such as masking. During masking, the relationship helps ensure the integrity and consistency of the masking format applied. Relationships can also potentially be leveraged during incremental discovery using the sensitive data model (or manual column addition to the sensitive data model) to pull in other related columns.
Add Referential Relationship
- Under Security center, click Data discovery.
- Under Related resources, click
Sensitive data models.
A list of sensitive data models to which you have access is displayed.
- Click the name of the sensitive data model for which you want to manage referential relationships.
- Under Resources, click Referential relationships.
- Click Add referential relationship.
- Select if this referential relationship is either an
Application-level (non-dictionary) relation or a
Database-level (dictionary-defined) relation.
You can manually enter referential relations, or they can be discovered through incremental discovery. See Perform an Incremental Discovery of Sensitive Data on Your Target Database for more information.
Note:
If you manually enter a database-level relation, then is existence will be checked against the database. - In the Choose parent column in sensitive data model section, select the schema name, table name, and column name of the parent column in the relationship.
- In the Choose child column in sensitive data model section, select the schema name, table name, and column name of the child column in the relationship.
- Optionally, click Add another column in composite relation to add another column to the parent and child columns list to create a composite relationship mapping in Data Safe.
- Select if you would like to either Add columns to sensitive data model or Create referential relationship only.
- Optionally, select the Sensitive type for
each column.
Adding a sensitive type is only available if you are adding the referential relationship to the sensitive data model.
Selecting a sensitive type will ensure that the parent and child column get masked using the same masking format as both columns will be added to the sensitive data model with as the same sensitive type. If no sensitive type is provided, then the sensitive type of the parent column will be used in the child column as well.
However, if you have entered multiple columns to create a composite relationship, a new masking format will be created following a naming convention of
schema.parenttable.datetime
. Thisschema.parenttable.datetime
masking format will automatically apply group masking with shuffle format when a masking job is initiated. See Group Masking Example Using Shuffle for more information. - Click Add relationship.
Delete a Referential Relationship
- Under Security center, click Data discovery.
- Under Related resources, click
Sensitive data models.
A list of sensitive data models to which you have access is displayed.
- Click the name of the sensitive data model for which you want to manage referential relationships.
- Under Resources, click Referential relationships.
- Select an application level referential relationship to delete from
the table.
Note:
Database-defined relations can't be deleted.Additionally, you can only select one relationship to delete at a time.
- Click Delete referential relationship.