Create or Edit a Data Mask Configuration
You can configure the masking process in one of two ways. Configure it in production, then when a sandbox is created or refreshed, the configuration appears in the sandbox. Or, configure the masking process in an existing sandbox.
Required Editions
| Available in: Lightning Experience |
| Available in: Professional, Enterprise, Unlimited, and Developer Editions with the Salesforce Data Mask or Data Mask & Seed add-on licenses |
Note This content relates to Salesforce Data Mask. Read
about Accelerate and Anonymize in Own from Salesforce.
A user must have view access on objects to configure masking and modify access on objects and related fields to mask. A particular field may not be available for masking because of its type. External objects, platform events, and BigObjects are not supported.
Important Choose the objects and the masking type to apply to its fields carefully.
The choices that you make determine the speed of data mask completion.
- To create a masking configuration and select which data to mask, go to the App Launcher and click the Data Mask app. You can edit or clone a previously saved masking configuration or start from scratch.
- On the Configurations tab, select New Configuration to open the new configuration page.
- Give this configuration a name to help you remember its purpose (no special characters or spaces are allowed), and describe its use or test. Then click Continue.
- Click Add Object and then Add Object from the Objects section.
- From the list of all standard and custom objects in your production org, select any objects that contain sensitive data that you want to mask and click Confirm.
- From the Objects panel, select an object to modify. For each selected object, configure the
masking rules for each of its fields.
Important Checkbox, lookup, and picklist field types aren’t supported. - Adjust the Org-Level and Scheduled Run settings. Your configuration runs manually by default.
- To add a masking type, select the object and then choose a data categorization type and data filter for each field. Refer to Supported Data Mask Types for reference.
- To edit an existing mask, click Edit from your masking configuration.
- To delete an existing mask, click Delete from your masking configuration.
- To manually run an existing mask, click Run and select Confirm. Or, set the mask to run on a schedule so that it starts automatically.
- Org-Level Settings
Configure Org-Level settings for data masking outside of Objects and Fields. - Set Filter Criteria
Target specific data records for masking to meet business requirements and security goals. - Set Masking Rules
Set masking rules for standard and custom objects in your sandbox org. - Schedule Data Mask Jobs
Decide whether to set a scheduled start with a repeating frequency or continue to run your mask with the manual default.
See Also
Did this article solve your issue?
Let us know so we can improve!

