- PrivaceraCloud Release 4.5
- PrivaceraCloud User Guide
- PrivaceraCloud
- What is PrivaceraCloud?
- Getting Started with Privacera Cloud
- User Interface
- Dashboard
- Access Manager
- Discovery
- Usage statistics
- Encryption and Masking
- Privacera Encryption core ideas and terminology
- Encryption Schemes
- Encryption Schemes
- System Encryption Schemes Enabled by Default
- View Encryption Schemes
- Formats, Algorithms, and Scopes
- Record the Names of Schemes in Use and Do Not Delete Them
- System Encryption Schemes Enabled by Default
- Viewing the Encryption Schemes
- Formats, Algorithms, and Scopes
- Record the Names of Schemes in Use and Do Not Delete Them
- Encryption Schemes
- Presentation Schemes
- Masking schemes
- Create scheme policies on PrivaceraCloud
- Encryption formats, algorithms, and scopes
- Deprecated encryption formats, algorithms, and scopes
- PEG REST API on PrivaceraCloud
- PEG API Endpoint
- Request Summary for PrivaceraCloud
- Prerequisites
- Anatomy of a PEG API endpoint on PrivaceraCloud
- About constructing the datalist for /protect
- About deconstructing the response from /unprotect
- Example of data transformation with /unprotect and presentation scheme
- Example PEG REST API endpoints for PrivaceraCloud
- Audit details for PEG REST API accesses
- Make calls on behalf of another user on PrivaceraCloud
- Privacera Encryption UDF for masking in Databricks
- Privacera Encryption UDFs for Trino
- Syntax of Privacera Encryption UDFs for Trino
- Prerequisites for installing Privacera Crypto plug-in for Trino
- Variable values to obtain from Privacera
- Determine required paths to crypto jar and crypto.properties
- Download Privacera Crypto Jar
- Set variables in Trino etc/crypto.properties
- Restart Trino to register the Privacera Crypto UDFs for Trino
- Example queries to verify Privacera-supplied UDFs
- Azure AD setup
- Launch Pad
- Settings
- General functions in PrivaceraCloud settings
- Applications
- About applications
- Azure Data Lake Storage Gen 2 (ADLS)
- Athena
- Privacera Discovery with Cassandra
- Databricks
- Databricks SQL
- Dremio
- DynamoDB
- Elastic MapReduce from Amazon
- EMRFS S3
- Files
- File Explorer for Google Cloud Storage
- Glue
- Google BigQuery
- Kinesis
- Lambda
- Microsoft SQL Server
- MySQL for Discovery
- Open Source Spark
- Oracle for Discovery
- PostgreSQL
- Power BI
- Presto
- Redshift
- Redshift Spectrum
- Kinesis
- Snowflake
- Starburst Enterprise with PrivaceraCloud
- Starburst Enterprise Presto
- Trino
- Datasource
- User Management
- API Key
- About Account
- Statistics
- Help
- Apache Ranger API
- Reference
- Okta Setup for SAML-SSO
- Azure AD setup
- SCIM Server User-Provisioning
- AWS Access with IAM
- Access AWS S3 buckets from multiple AWS accounts
- Add UserInfo in S3 Requests sent via Dataserver
- EMR Native Ranger Integration with PrivaceraCloud
- Spark Properties
- Operational Status
- How-to
- Create CloudFormation Stack
- Enable Real-time Scanning of S3 Buckets
- Enable Discovery Realtime Scanning Using IAM Role
- How to configure multiple JSON Web Tokens (JWTs) for EMR
- Enable offline scanning on Azure Data Lake Storage Gen 2 (ADLS)
- Enable Real-time Scanning on Azure Data Lake Storage Gen 2 (ADLS)
- How to Get Support
- Coordinated Vulnerability Disclosure (CVD) Program of Privacera
- Shared Security Model
- PrivaceraCloud
- PrivaceraCloud Previews
- Privacera documentation changelog
Presentation Schemes
Presentation Schemes
As background, refer to the definition of terms in the introduction to this guide.
A presentation scheme controls how decrypted data should be presented to authorized users. After data is decrypted, a presentation scheme can obfuscate it again in a form suitable for displaying to authorized users.
If no presentation scheme is specified, the decrypted data is viewable in its original form.
If the user does not have access rights to view the data, an error message is displayed. For information about granting user access to schemes, see Scheme Policies.
Viewing the System Presentation Schemes and Other Functions
To see the system presentation schemes:
Expand Encryption & Masking.
Click Schemes.
Click the Presentation Scheme tab.
You can import, export, define new presentation schemes or modify existing ones.
List of System Presentation Schemes
The following is a list of the Privacera-supplied system presentation schemes. The name of a scheme in general describes the type of data the scheme is designed to encrypt.
The formats, algorithms, and scopes associated with each scheme are described in Encryption formats, algorithms, and scopes.
SYSTEM_PRESENTATION_PERSON_NAME
SYSTEM_PRESENTATION_SSN
SYSTEM_PRESENTATION_EMAIL
SYSTEM_PRESENTATION_ADDRESS
SYSTEM_PRESENTATION_CREDITCARD
SYSTEM_PRESENTATION_US_PHONE_FORMATTED
SYSTEM_PRESENTATION_ACCOUNT
Create a Custom Presentation Scheme
Before defining a scheme, plan what you want it to do. See the Encryption formats, algorithms, and scopes.
Login to the Privacera Portal.
On the left, expand Encryption & Masking.
On the left, click Schemes.
Click the Presentation Scheme tab.
To add a new presentation scheme, click + Add.
If you are using Privacera Platform, click the Presentation Scheme tab.
Fill in the following fields:
Name: a useful name for this scheme.
Description: a helpful description of what the scheme does.
Format Type: From the pulldown, select the format you want to use.
Scope: From the pulldown, specify the extent of the data transform. The available scopes depend on which format you have chosen.
Value: This optional field is for certain types of scopes.
Algorithm: Select the required algorithm, which depends on the format you have chosen.
Click Save to retain your changes or Close to discard them.
Viewing the System Presentation Schemes and Other Functions
To see the system presentation schemes:
Expand Encryption & Masking.
Click Schemes.
Click the Presentation Scheme tab.
You can import, export, define new presentation schemes or modify existing ones.
List of System Presentation Schemes
The following is a list of the Privacera-supplied system presentation schemes. The name of a scheme in general describes the type of data the scheme is designed to encrypt.
The formats, algorithms, and scopes associated with each scheme are described in Encryption formats, algorithms, and scopes
SYSTEM_PRESENTATION_PERSON_NAME
SYSTEM_PRESENTATION_SSN
SYSTEM_PRESENTATION_EMAIL
SYSTEM_PRESENTATION_ADDRESS
SYSTEM_PRESENTATION_CREDITCARD
SYSTEM_PRESENTATION_US_PHONE_FORMATTED
SYSTEM_PRESENTATION_ACCOUNT
Create a Custom Presentation Scheme
Before defining a scheme, plan what you want it to do. See the Encryption formats, algorithms, and scopes.
On the left, expand Encryption & Masking.
On the left, click Schemes.
Click the Presentation Scheme tab.
To add a new presentation scheme, click + Add.
If you are using Privacera Platform, click the Presentation Scheme tab.
Fill in the following fields:
Name: a useful name for this scheme.
Description: a helpful description of what the scheme does.
Format Type: From the pulldown, select the format you want to use.
Scope: From the pulldown, specify the extent of the data transform. The available scopes depend on which format you have chosen.
Value: This optional field is for certain types of scopes.
Algorithm: Select the required algorithm, which depends on the format you have chosen.
Click Save to retain your changes or Close to discard them.