Why this matters
An estate with tens of thousands of assets cannot be tagged by hand, and a half tagged estate looks covered when it is not. This module sets up a rule that classifies columns as they arrive.
Before you start
The rule is the durable artifact
The durable artifact is not the tag on a column. It is the rule that decides which columns get the tag. Express the rule once and it applies to assets that do not exist yet, which is the only way classification keeps pace with ingestion.
Filters are how a rule finds its targets
An automation needs a way to select what it acts on: a naming pattern, a data type, a source, a profiling result. The precision of the filter determines whether you get useful classification or a wall of false positives that stewards learn to ignore.
Sensitivity classification carries obligations
Downstream, a sensitivity tag can drive masking, access policy and audit evidence. Getting it wrong in either direction has consequences, so review the automation rather than set and forget it.
The interactive demo
Work through the demo below. It runs in your browser with nothing to install. Watch for:
- Setting up an automation on a table
- Configuring a filter based on a column
- Applying a PII sensitive tag to that column so it runs automatically
This demo is also available on its own at the Learning Center.
After this module you should be able to
- Build an automation that classifies columns without manual tagging
- Write a filter precise enough to avoid false positives
- Explain what a sensitivity tag obliges downstream