Create a data access rule

Important 

In Collibra 2024.02, we've launched a new user interface (UI) in beta for Collibra Data Intelligence Platform! You can learn more about this latest UI in the UI overview.

Use the following options to see the documentation in the latest UI or in the previous, classic UI:

Before you begin

  • You have a global role that has the Protect > Edit or Protect > Administration global permission.
  • You have the Catalog global role. This role is required to view data classifications for selection in a data access rule.
  • Protect groups are created.

Steps

  1. Open Protect.
  2. Click the Data Access Rules tab.
  3. Click Create Data Access Rule.
    The Create Data Access Rule dialog box appears.
  4. Enter the required information.
    FieldDescription
    Rule NameNameEnter a name to identify your data access rule.
    Optional: DescriptionEnter a description for the rule.
    GroupGroupsSelect the groupgroups for the rule.
    Tip You can add more groups by using the plus icon.
    AssetAssets

    Select the data assetassets that the rule is protecting.

    Tip 
    • This field contains Business Process, Data Category, and Data Set assets, in addition to assets of custom asset types.
    • For more information, go to Technical background and Prescriptive paths.
    • You can add more groups by using the plus icon.
    Optional: With (masking option)Mask Data
    1. Click Add Masking, and then, in the Masking Option field, sSelect the type of masking that you want to apply to a data category or data classification.
      Tip This field contains the following options:

    2. Click Data Category or Data Classification, and then select the data category or data classification for the selected masking option.

    Note If the association between the data classification and a column is not yet accepted, the rule ignores the column.

    Tip You can add more data categories and data classifications by using the plus iconAdd Another Masking.

    Optional: And (action)Filter Data

    1. Click Add Filter, and then, in the Filter Action field, sSelect the type of row-filtering action that you want to apply to a data classification with a specific code set and code value.
      2. Tip This field contains the following options:
      • Show
      • Hide
    2. In the rows whereData Classification field, select the data classification that you want to show or hide.
    3. In the hasCode Set field, select the code set for the selected data classification.
    4. In the nextCode Value field, select the code value for the selected code set.
    Tip You can add more data classifications for row-filtering by using the plus iconAdd Another Filter.
    Tip 
    • The Grant access to the data linked to these assets checkbox, which is selected by default, is applicable to only Databricks and Snowflake. A selected checkbox indicates that you are allowing the selected groups to access those tables and columns in the database that are linked to the selected assets. If you do not want the selected groups to have this level of access, clear the checkbox.
    • The Summary section shows a summary of the rule.

    Image of the Create a Data Access Rule dialog box

    Image of the Create Data Access Rule dialog box

  5. To preview the rule, click Generate Preview.
    Tip The preview shows only the first 1,000 affected columns. The drop-down list box below the Generate Preview button is used to switch between the assets that you selected in the rule. Each asset has its own preview table.
  6. Click Save Rule.
    A message appears stating that the rule is sent to source, and the rule is shown in the table on the Data Access Rules tab.