Manage Tags

Connecting a Snowflake object tag to ALTR brings every column carrying that tag under ALTR’s management, so it can carry a masking policy or be targeted by an Access Management Policy. See Data Masking on Snowflake for the protection types available at tag-connection time.

Connect a Tag

To connect a Snowflake object tag:

1. Select Data Configuration > Data Management > Tags in the navigation menu.
2. Click Connect Tag.
3. Select the Database and Schema where the tag is defined.
4. Select the Tag to connect.
5. Select a Protection Type — default masking, native masking (pushdown), tokenization, or Format-Preserving Encryption (FPE).
6. Click Connect.

Note

Native masking (pushdown) is available for tag connections only, not column connections — see Manage Columns and Native vs. External-Function Masking.

Note

If no Snowflake object tags exist yet, create them through Data Classification or Snowflake Native automatic tagging — see Classification.

Check Tag Connection Status

To check a tag’s connection status:

1. Select Data Configuration > Data Management > Tags in the navigation menu.
2. Locate the tag in the list and review its Status column.

Disconnect a Tag

Disconnecting a tag removes ALTR’s masking policy and any associated external functions or user-defined functions (UDFs) from the tagged columns in Snowflake.

To disconnect a tag:

1. Select Data Configuration > Data Management > Tags in the navigation menu.
2. Select the tag to disconnect.
3. Click Disconnect.

Caution

Disconnecting a tag removes any masking policy enforcing it. Roles that previously saw a masked value may see plaintext until a new connection or policy is in place.