Tags

Connecting a Snowflake object tag to ALTR automatically enforces ALTR access governance to all columns assigned to that tag. Learn more.

Use this page to

• Connect Snowflake object tags to ALTR
• Connect encrypted tags to ALTR
• Connect tokenized tags to ALTR
• View tag connection status
• Disconnect tags from ALTR

Learn about each field

Name	Description
ADVANCED: Enable custom roles	If on, custom roles are used with this tag, which allow you to customize the behavior of ALTR-enforced masking policies through a post-hook function. Learn more. By default, this field is disabled.
Alphabet Type	Alphabet used with a key and a tweak to encrypt the tag. Options are: Alphabetic— encrypted data is only letters: a-z and A-Z Alphanumeric— encrypted data is letters and numbers: a-z, A-Z and 0-9 Numeric— encrypted data is only numbers: 0-9 NOTE: This field is only available if format-preserving encryption is enabled for your organization.
ALTR Data Source Connection	The Snowflake connection that is used to connect the tag. Make sure that the service user associated with this connection has privileges to access the tag and its database.
Classification Report (tab)	Click to view the results of the Snowflake or Google DLP classification scan of the database.
Columns (tab)	Click to view, connect and disconnect Snowflake columns in ALTR.
Custom Roles	If enabled, custom roles are used with this tag, which allow you to customize the behavior of ALTR-enforced masking policies through a post-hook function. Learn more. By default, this field is disabled.
Disconnect Tag	Click to disconnect the tag from ALTR. Access governance to columns with that tag will no longer be applied.
Key	Name of the key used in format-preserving encryption. The key is unique, case sensitive and is 265 or fewer characters. NOTE: This field is only available if format-preserving encryption is enabled for your organization.
Refresh Allowed Values	Click to ingest new allowed values to be used when defining ALTR policies.
Status	Connection status of the tag. Options are: Connected— Tag has been successfully connected to ALTR. Connected (native masking)— Tag has been successfully connected to ALTR using native masking. Encrypted— Tag is connected to ALTR and has been marked as being encrypted. Error— Tag failed to connect to ALTR; contact ALTR Support. In Progress— Tag is being connected to ALTR. Tokenized— Tag is connected to ALTR and has been marked as containing tokens.
Tag Database	Name of the database where the tag is located. This can be found on the data source connection. NOTE: If your data doesn’t display in the dropdown, ensure your service user account has privileges to access the data.
Tag Name	Name of the tag in Snowflake. NOTE: If your data doesn’t display in the dropdown, ensure your service user account has privileges to access the data.
Tag Schema	Name of the schema within the database where the tag is located. NOTE: If your data doesn’t display in the dropdown, ensure your service user account has privileges to access the data.
Tracking ID	Useful if you need to work with ALTR support due to a connection issue with the tag.
Tweaks	Name of the tweak used in format-preserving encryption. The key is unique, case sensitive and is 265 or fewer characters. NOTE: This field is only available if format-preserving encryption is enabled for your organization.
Which option applies to this tag?	Select an integration type. Options are: Default masking— data access is controlled by ALTR using Snowflake masking policies and external functions. This is the default behavior for connecting Snowflake object tags to ALTR. Tokenization— data access is and detokenization are controlled by ALTR using Snowflake masking policies and external functions. If this tag is tokenized, ensure all values for this tag are tokenized Learn more. Format-preserving encryption— data access and decryption are controlled by Snowflake masking policies and external functions. Ensure the tag has been encrypted in Snowflake. Learn more. Native masking— Data access is controlled by ALTR using only Snowflake masking policies. Learn more.