All 7 Dynamic Data Masking questions
More in Dynamic Data Masking
What is dynamic data masking in SQL Server, and what problem does it solve? How do you grant a specific user or role permission to see the real, unmasked data despite dynamic data masking being applied? Does dynamic data masking prevent a determined user from working around it to see the real underlying values? How do you remove dynamic data masking from a column once it is no longer needed? How would you apply dynamic data masking to an existing table with sensitive columns as part of a broader compliance initiative, such as meeting data privacy regulations? How does dynamic data masking behave differently when a masked column is used in a JOIN, WHERE clause, or exported through an application, compared to a simple SELECT query?
Advertisement
Back to results for “Security”
SQL Server › Dynamic Data Masking

What built-in masking functions are available in SQL Server for dynamic data masking?

Beginner

Answer

SQL Server provides several built-in masking functions including default, which fully hides a value based on its data type, email, which partially masks an email address, random, which replaces a numeric value with a random number within a specified range, and partial, which lets you define a custom pattern showing only certain characters.
ALTER TABLE Customers
ALTER COLUMN Phone ADD MASKED WITH (FUNCTION = 'partial(0,"XXX-XXX-",4)');
Real-world example A company masks customer phone numbers so that support staff without special permission only see the last four digits, following a partial masking pattern that hides most of the number while still allowing basic identification.

Common follow-ups: How do you choose the right masking function for a specific type of sensitive data?;Can you create a completely custom masking pattern beyond the built-in functions?

SQL Server Security & Permissions;Data Types & Schema Design
All 7 Dynamic Data Masking questions