Dynamic Data Masking On Synapse Serverless SQL Database

Question

Is it possible to implement dynamic data masking on an external Synapse Serverless pool?For context we are implementing a delta lake and the analytics teams will be accessing data via a SQL Serverless pool.

Answer 1

Hi @WZIAFP

Welcome to Microsoft Q&A platform and thanks for posting your query here.

Currently, Dynamic Data Masking (DDM) is not natively supported on Azure Synapse Serverless SQL Pools. DDM is available for dedicated SQL pools, which makes it challenging to apply directly to serverless external data sources like Delta Lakes.

However, you can explore alternative methods to achieve a similar effect for your analytics teams using serverless SQL pools:

• Custom Views: Create views that mask or obfuscate sensitive data by transforming columns as needed before being accessed.
• Row-Level Security (RLS): Implement RLS policies to control access based on user roles, which can help manage data visibility at a granular level.

While these methods may require additional configuration, they offer some level of control and security.

Reference: https://learn.microsoft.com/en-us/azure/synapse-analytics/guidance/security-white-paper-access-control#dynamic-data-masking

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.