Implementing data masking and data obfuscation in Fabric

[pmscorca]

Hi,

I'd like undestand better how organizing and implementing data masking and data obfuscation in Fabric, preferably by a specific paper.

I report some considerations below:

• data masking and data obfuscation seem synonyms, but data masking replaces original data with anonymized data while data obfuscation transforms original data with encrypted data,
• data masking and data obfuscation should act at storage level. It shoul be possible to view original or clear data for some users and "masked" data for other users,
• it should be preferably a dynamic behaviour for the data masking or obfuscation technique to apply,
• it occurs to take into account the performance offered by a data masking or obfuscation technique,
• the data masking and obfuscation tecniques should be applicable at lakehouse and warehouse levels.

A good and structured official paper should be very useful also to specify better the related glossary terms.

Any helps to me, please? Many thanks

[yongshao]

Dynamic Data Masking  is supported by SQL analytical endpoint - https://learn.microsoft.com/en-us/fabric/data-warehouse/dynamic-data-masking 

Does it mean such feature can be applied to Lakehouse delta tables via its SQL endpoint?

[Anonymous · Accepted solution]

Hi @pmscorca ,

Dynamic Data Masking is an advanced data protection technology that helps organizations protect sensitive information in their databases. It allows you to define masking rules for specific columns, ensuring that only authorized users can see the original data while hiding the data from others.

When using Data Masking in Fabric, there are prerequisites:

• A Fabric workspace with activated capacity or trial capacity.
• A Warehouse.
• An administrative user with admin, member, or contributor permissions for the workspace, or elevated permissions for the warehouse.
• A test user without admin, member, or contributor permissions for the workspace, or elevated permissions for the warehouse.

Then you can connect, configure, test, manage, and modify dynamic data masking rules and clean it.

For detailed steps and information about Data Masking, refer to the official documentation below:

Dynamic data masking in Synapse Data Warehouse - Microsoft Fabric | Microsoft Learn

How to implement dynamic data masking in Synapse Data Warehouse - Microsoft Fabric | Microsoft Learn

About data obfuscation:

Use Delphix Compliance Service to mask sensitive data in Data Factory for Microsoft Fabric Dataflow.

It explains how the service replaces sensitive data values ​​with fictitious but realistic data values ​​to reduce risks while ensuring data availability.

For detailed information and operations on using Delphix Compliance Services to perform data obfuscation in Data Factory, see the following official documentation:

Data obfuscation in Data Factory with Delphix Compliance Services - Microsoft Fabric | Microsoft Lea...

Best Regards,
Yang
Community Support Team

If there is any post helps, then please consider Accept it as the solution  to help the other members find it more quickly.
If I misunderstand your needs or you still have problems on it, please feel free to let us know. Thanks a lot!