Edit a data access rule

Important 

In Collibra 2024.05, we launched a new user interface (UI) for Collibra Data Intelligence Platform! You can learn more about this latest UI in the UI overview.

Use the following options to see the documentation in the latest UI or in the previous, classic UI:

You can edit a data access rule regardless of its synchronization (sync) status.

When editing a rule whose sync status is Draft, if you don't want to start the sync, you can simply save your changes to the draft by clicking Save Draft instead of Publish.

If you publish a rule whose sync status is Pending, Active, or Failed, the sync restarts.

Prerequisites

  • You have a global role that has the Protect > Edit or Protect > Administration global permission.
    Note If you have the the Protect > Edit global permission, you can edit only the data access rule that you created. If you have the Protect > Administration global permission, you can edit any data access rule.
  • You have the Catalog global role. This role is required to view data classifications for selection in a data access rule.
  • You have the permissions to view the assets that are associated with the data access rule. Otherwise, the Unauthorized Asset value is shown to you when you edit the rule.

Steps

  1. Open Protect.
  2. In the table, in the row containing the rule that you want to edit, click .
    The Edit Data Access Rule dialog box appears.The Data Access Rule dialog box appears.
  3. Edit the required information.
    FieldDescription
    Rule NameNameEnter a name to identify your data access rule.
    Optional: DescriptionEnter a description for the rule.
    GroupGroupsSelect the groupgroups for the rule.
    Tip You can add more groups by using the plus icon.
    AssetAssets

    Select the data assetassets that the rule is protecting.

    Tip 
    Optional: With (masking option)Mask Data
    1. Click Add Masking, and then, in the Masking Option field, sSelect the masking level that you want to apply to a data category or data classification.
      Tip This field contains the following options:

    2. Click Data Category or Data Classification, and then select the data category or data classification for the selected masking level.

    Note If the association between the data classification and a column is not yet accepted, the rule ignores the column.

    Tip You can add more data categories and data classifications by using the plus iconAdd Another Masking.

    Optional: And (action)Filter Data

    1. Click Add Filter, and then, in the Filter Action field, sSelect the row-filtering action that you want to apply to a data classification with a specific code set and code value.
      2. Tip This field contains the following options:
      • Show
      • Hide
    2. In the rows whereData Classification field, select the data classification that you want to show or hide.
    3. In the hasCode Set field, select the code set for the selected data classification.
    4. In the nextCode Value field, select the code value for the selected code set.
    Tip You can add more data classifications for row-filtering by using the plus iconAdd Another Filter.
    Tip 
    • A selected checkbox indicates that you are allowing the selected groups to access those tables and columns in the database that are linked to the selected assets. If you do not want the selected groups to have this level of access, clear the checkbox.
    • The Summary section shows a summary of the rule.

    Image of the Create a Data Access Rule dialog box

    Image of the Data Access Rule dialog box

  4. To preview the rule, in the Summary section, click Generate Preview.
    Tip The preview shows only the first 1,000 affected columns. The drop-down list box below the Generate Preview button is used to switch between the assets that you selected in the rule. Each asset has its own preview table.
  5. Click Save Rule.
    A message appears stating that the rule is sent to source, and the rule is shown in the table on the Data Access Rules tab.
  6. Click Save Draft (shown only in a draft rule) or Publish.