Skip to main content

data_masking_policies

Creates, updates, deletes, gets or lists a data_masking_policies resource.

Overview

Namedata_masking_policies
TypeResource
Idazure.sql.data_masking_policies

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstringFully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
namestringThe name of the resource.
applicationPrincipalsstringThe list of the application principals. This is a legacy parameter and is no longer used.
dataMaskingStatestringThe state of the data masking policy. Required. Known values are: "Enabled" and "Disabled". (Enabled, Disabled)
exemptPrincipalsstringThe list of the exempt principals. Specifies the semicolon-separated list of database users for which the data masking policy does not apply. The specified users receive data results without masking for all of the database queries.
kindstringThe kind of Data Masking Policy. Metadata, used for Azure portal.
locationstringThe location of the data masking policy.
maskingLevelstringThe masking level. This is a legacy parameter and is no longer used.
systemDataobjectAzure Resource Manager metadata containing createdBy and modifiedBy information.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectresource_group_name, server_name, database_name, subscription_idGets the database data masking policy.
create_or_updateinsertresource_group_name, server_name, database_name, subscription_idCreates or updates a database data masking policy.
create_or_updatereplaceresource_group_name, server_name, database_name, subscription_idCreates or updates a database data masking policy.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
database_namestringThe name of the database. Required.
resource_group_namestringThe name of the resource group. The name is case insensitive. Required.
server_namestringThe name of the server. Required.
subscription_idstring

SELECT examples

Gets the database data masking policy.

SELECT
id,
name,
applicationPrincipals,
dataMaskingState,
exemptPrincipals,
kind,
location,
maskingLevel,
systemData,
type
FROM azure.sql.data_masking_policies
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND server_name = '{{ server_name }}' -- required
AND database_name = '{{ database_name }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;

INSERT examples

Creates or updates a database data masking policy.

INSERT INTO azure.sql.data_masking_policies (
properties,
resource_group_name,
server_name,
database_name,
subscription_id
)
SELECT
'{{ properties }}',
'{{ resource_group_name }}',
'{{ server_name }}',
'{{ database_name }}',
'{{ subscription_id }}'
RETURNING
id,
name,
kind,
location,
properties,
systemData,
type
;

REPLACE examples

Creates or updates a database data masking policy.

REPLACE azure.sql.data_masking_policies
SET
properties = '{{ properties }}'
WHERE
resource_group_name = '{{ resource_group_name }}' --required
AND server_name = '{{ server_name }}' --required
AND database_name = '{{ database_name }}' --required
AND subscription_id = '{{ subscription_id }}' --required
RETURNING
id,
name,
kind,
location,
properties,
systemData,
type;