Create a data access rule

Important 

In Collibra 2024.05, we launched a new user interface (UI) for Collibra Data Intelligence Platform! You can learn more about this latest UI in the UI overview.

Use the following options to see the documentation in the latest UI or in the previous, classic UI:

When creating a data access rule, you can do one of the following:

  • Create a draft of the rule. This action doesn't start the synchronization (sync), allowing you to work on the rule later. The sync status of a draft rule is Draft.
  • Publish the rule. This action starts the sync, sending the rule to the source. The sync status of a published rule is initially Pending, and it changes to Active if the sync is successful.

Prerequisites

  • You have a global role that has the Protect > Edit or Protect > Administration global permission.
  • You have the Catalog global role. This role is required to view data classifications for selection in a data access rule.
  • Protect groups are created.

Steps

  1. Open Protect.
  2. Click the Data Access Rules tab.
  3. Click Create Data Access Rule.
    The Create Data Access Rule dialog box appears.The Data Access Rule dialog box appears.
  4. Enter the required information.
    FieldDescription
    Rule NameNameEnter a name to identify your data access rule.
    Optional: DescriptionEnter a description for the rule.
    GroupGroupsSelect the groupgroups for the rule.
    Tip You can add more groups by using the plus icon.
    AssetAssets

    Select the data assetassets that the rule is protecting.

    Tip 
    Optional: With (masking option)Mask Data
    1. Click Add Masking, and then, in the Masking Option field, sSelect the masking level that you want to apply to a data category or data classification.
      Tip This field contains the following options:

    2. Click Data Category or Data Classification, and then select the data category or data classification for the selected masking level.

    Note If the association between the data classification and a column is not yet accepted, the rule ignores the column.

    Tip You can add more data categories and data classifications by using the plus iconAdd Another Masking.

    Optional: And (action)Filter Data

    1. Click Add Filter, and then, in the Filter Action field, sSelect the row-filtering action that you want to apply to a data classification with a specific code set and code value.
      2. Tip This field contains the following options:
      • Show
      • Hide
    2. In the rows whereData Classification field, select the data classification that you want to show or hide.
    3. In the hasCode Set field, select the code set for the selected data classification.
    4. In the nextCode Value field, select the code value for the selected code set.
    Tip You can add more data classifications for row-filtering by using the plus iconAdd Another Filter.
    Tip 
    • The Grant access to the data linked to these assetsGrant Access to Data Linked to Selected Assets checkbox, which is selected by default, is applicable to only Databricks and Snowflake. A selected checkbox indicates that you are allowing the selected groups to access those tables and columns in the database that are linked to the selected assets. If you do not want the selected groups to have this level of access, clear the checkbox.
    • The Summary section shows a summary of the rule.

    Image of the Create a Data Access Rule dialog box

    Image of the Data Access Rule dialog box

  5. To preview the rule, in the Summary section, click Generate Preview.
    Tip The preview shows only the first 1,000 affected columns. The drop-down list box below the Generate Preview button is used to switch between the assets that you selected in the rule. Each asset has its own preview table.
  6. Click Save Rule.
    A message appears stating that the rule is sent to source, and the rule is shown in the table on the Data Access Rules tab.
  7. Click Create Draft or Publish.