Configure data anonymization clone request

Data privacy clone integration is configured using a PostClone script to create and execute data privacy jobs for configured policies on the target. After running the script, users will see de-identified data and will not have access to the original data.

Before you begin

The data privacy PostClone script is installed with the activation of the data privacy plugin (sn_dp_store_app). See Activate data privacy for details.

Role required: data_privacy_clone_processor, data_privacy_admin, and admin

Procedure

1. Activate the data privacy plugin (sn_dp_store_app) on the source instance.
   The data privacy PostClone script is installed.
2. Elevate to the data_privacy_admin role.
   For details on role elevation, see Elevate to a privileged role.
3. Navigate to System Security > Data Privacy > Anonymization.
4. Select Create new policy.
   See Create anonymization policies for details.
5. Select Data tables or columns.
6. Select Create.
7. Enter a name and select a data class.
8. Select to Activate the policy during cloning.
9. Select the policy order to run if there are multiple clone policies.
   A data privacy job for Postclone configuration with a higher Application Order might start before another job of lower order, if the job with the higher order does not involve any table related to other lower order job.
10. Select Continue.
11. Complete the policy configuration and publish the policy.
12. Back up data privacy configurations.
13. Schedule the anonymization job.
    See Create anonymization jobfor details.
14. As the data privacy admin, submit a clone request.

Result

The data privacy PostClone script executes on the target Instance and The PostClone script creates a data privacy federated job record on the target instance. The federated job creates and executes a data privacy job for each post-clone policy, in Application Order, on the target instance.​The backup source is cloned to the target Instance. Data privacy PostClone script creates and executes data privacy jobs for configured policies on the target instance.

The elevated data privacy clone processor can log on to the target instance and monitor the post-clone federated job state on the dp_federated_job.list and dp_job.list​.