Anonymize collected data
Settings guide
Prepare collected data for test and demo environments while preserving the links between systems.
Administrators use anonymization profiles to rewrite one or more systems' collected data into new anonymized collects. A linked value receives the same replacement across systems so relations keep working. Review the result before sharing it: rules such as keep deliberately retain original values.
Create and run a profileDirect link to Create and run a profile
- Open Configuration > Settings > Preferences and set Anonymization to
1. This shows the Anonymization tab in Settings. - Under Anonymization profiles, select Add and create a profile.
- On the profile's Settings tab, select Systems, Default rule, and E-mail domain. Decide whether to enable Anonymize every collect of these systems and Load only anonymized data of these systems.
- On Columns, select Suggest rules, then review every column's rule. Available rules are keep, token, similar, mask, null, first_name, last_name, full_name, email, dn, template, date_shift, and number_noise.
- Review Relations and the validation tabs. Run the profile from Run and inspect the resulting data and relations.
Use collection history to distinguish anonymized collects from originals and confirm which collect is loaded.
Prepare the test environmentDirect link to Prepare the test environment
The profile's Environment tab provides:
| Action | Purpose |
|---|---|
| Delete stamps that are not anonymized | Removes the original, non-anonymized collects. Review retention and recovery needs before deleting them. |
| Scan the configuration | Looks for original values remaining in configuration. Review the results before sharing or exporting. |
| Export for a test environment | Creates a test-environment export without passwords, keys, and other secrets. Review the data and configuration as well as the omitted secrets. |
Understand the execution restrictionsDirect link to Understand the execution restrictions
While anonymized data is loaded for a system, NIM does not run functions for that system. Mail is restricted to reserved domains and the e-mail domain configured in a profile. These controls are separate from a system's Read-only setting.
Setting Anonymization back to 0 only hides the Settings tab. Profiles configured to anonymize every collect continue to do so. Review the profile settings before assuming collection behavior has changed.
Back up profiles and keysDirect link to Back up profiles and keys
Repositories include anonymization profiles without their keys. Updated snapshots include profiles and their keys. Protect these backups and verify the recovery behavior for your installed build.