Adding a Data-Masking Policy for Salesforce


You can create a data masking policy for Salesforce data. A data-masking policy contains a set of Salesforce objects and fields to mask and the masking strategy to use to mask the data. The data masking strategies depend on the data type. For example, if the data type is "date", then you can use the shuffling masking type. For easier management, use separate data-masking policies for each backup set.

Caution: The changes that data masking makes to the data are irreversible and might destroy the data. Data masking is intended for restoring production data to a sandbox.

Before You Begin

You must run a backup before you add your first data-masking policy.


  1. From the navigation pane, go to Protect > Salesforce.

    The Salesforce page appears.

  2. In the Name column, click the app.

    The app details page appears.

  3. In the upper-right corner of the page, click the action button , and then click Data masking policies.

    The Data masking policies page appears.

  4. Click Add policy.

    The Add masking policy dialog box appears.

  5. In the Policy name box, enter a name for the policy.

  6. In the Configuration section, click Add.

    The Add configuration dialog box appears.

  7. From the Object list, select an object to be masked.

  8. From the Fields list, select the fields to mask.

  9. From the Type list, select the type of masking to use.

    If you selected more than one field, only the data-masking types that are applicable to all the selected fields are shown.

  10. If the data masking type requires inputs, enter the inputs:

    • If you selected Fixed string, in the String box, type the string to use as a replacement.

    • If you selected Numeric range, in the Min and Max boxes, enter the minimum and maximum values to use to generate the random number.

    • If you selected Numeric variance, in the Max percentage box, enter the maximum percentage to use to vary the data.

  11. Click Add.

  12. Click Save.