White Paper: Just-in-Time Database Access Best Practices

Bytebase logo
  • 8-in-1
    • Schema Migration
      GUI-based, database CI/CD with GitOps
    • Permission-based SQL Editor
      Bastion-less human-to-database permission control
    • Dynamic Data Masking
      Role-based multi-level masking policy
    • Batch Change
      Multi-environments, multi-regions, multi-tenants
  • Use Case

    • Planned Database CI/CD
    • Just-in-Time Database Access
    • Adhoc Database Change
    • Large-Scale Deployment
    • Headless Database Backend

    Industry

    • Financial Services
    • Technology
    • Manufacturing
    • Gaming
    • Web3
    • Docs
    • Supported Databases
    • Case Study
    • Blog
    • Company
    TutorialStep-by-step guide through common features.
    Start Learning
  • Pricing
...CloudSelf-host
    8-in-1
    Pricing
  • GitHub
  • Self-hostCloud
    • Why Bytebase
    • Supported Databases
    • Use Cases
    • POC Checklist πŸ“
    • Best Practices πŸ“˜
    • Core Concepts πŸ’‘
    • FAQ

      • Self-host
      • Upgrade
      • Configure External PostgreSQL
      • Configure External URL
      • Cloud
      • Step 1 - Deploy with Docker
      • Step 2 - Register Accounts
      • Step 3 - Configure Environments
      • Step 4 - Add an Instance
      • Step 5 - Create a Project
      • Step 6 - Change Schema
      • Step 7 - Query Data
    • Connect Your Database
    • Terraform Provider

      • Overview
        • Batch Change
        • Schema Sync
        • Changelist
        • Stored Procedure
        • Schema Editor
        • Schema Diagram
        • Online Schema Migration
        • Secret Variable
        • Overview
        • Review Policy
        • Review Rules
        • UI Integration
        • CI Integration
        • API
        • Custom Approval
        • Rollout Policy
        • Data Rollback
        • Schema Rollback
        • Change History
        • Schema Drift Detection
          • Overview
          • Slow Query Report
          • Weekly Email Report
          • Index Advisor
        • Webhook
        • Risk Center
        • Issue
        • Schema Template
      • Troubleshoot 🐞
      • Overview
      • Release
      • Overview
      • Query
      • Admin Mode
      • Data Masking
      • Manage SQL Scripts
      • Explore Schema
      • AI Assistant
      • Overview
      • Query
      • Export
      • EXPLAIN
      • Overview
      • Semantic Types
        • Masking Algorithm
      • Global Masking Rule
        • Data Classification
      • Column Masking
      • Masking Exemption

      • Single Sign-On
        • OAuth 2.0
        • OpenID Connect (OIDC)
        • LDAP
      • Roles and Permissions
      • User Groups
      • Custom Roles
      • Audit Log
      • SCIM
      • 2FA
      • Password Restriction
      • Sign-in Restriction
      • Watermark
      • Manage License
      • Production Setup
      • Back up Data
      • Database Change Mode
      • AI Assistant
      • Database Instance
      • Environment Policy
      • Customize Logo
      • Announcement
      • SMTP and Email Delivery
      • Archive
      • Overview
      • Authentication
      • SQL Review
      • Release
      • Plan
      • Rollout
      • Issue
      • SQL Editor
      • Permission
      • Data Classification
      • Audit Log
      • Terraform
      • Slack
      • Jira
      • Supabase
      • Render
      • Neon
      • Server Startup Options
      • Error Code for Bytebase Core
      • Error Code for SQL Advisor
      • Schema Definition Language
    • Why Bytebase
    • Supported Databases
    • Use Cases
    • POC Checklist πŸ“
    • Best Practices πŸ“˜
    • Core Concepts πŸ’‘
    • FAQ

      • Self-host
      • Upgrade
      • Configure External PostgreSQL
      • Configure External URL
      • Cloud
      • Step 1 - Deploy with Docker
      • Step 2 - Register Accounts
      • Step 3 - Configure Environments
      • Step 4 - Add an Instance
      • Step 5 - Create a Project
      • Step 6 - Change Schema
      • Step 7 - Query Data
    • Connect Your Database
    • Terraform Provider

      • Overview
        • Batch Change
        • Schema Sync
        • Changelist
        • Stored Procedure
        • Schema Editor
        • Schema Diagram
        • Online Schema Migration
        • Secret Variable
        • Overview
        • Review Policy
        • Review Rules
        • UI Integration
        • CI Integration
        • API
        • Custom Approval
        • Rollout Policy
        • Data Rollback
        • Schema Rollback
        • Change History
        • Schema Drift Detection
          • Overview
          • Slow Query Report
          • Weekly Email Report
          • Index Advisor
        • Webhook
        • Risk Center
        • Issue
        • Schema Template
      • Troubleshoot 🐞
      • Overview
      • Release
      • Overview
      • Query
      • Admin Mode
      • Data Masking
      • Manage SQL Scripts
      • Explore Schema
      • AI Assistant
      • Overview
      • Query
      • Export
      • EXPLAIN
      • Overview
      • Semantic Types
        • Masking Algorithm
      • Global Masking Rule
        • Data Classification
      • Column Masking
      • Masking Exemption

      • Single Sign-On
        • OAuth 2.0
        • OpenID Connect (OIDC)
        • LDAP
      • Roles and Permissions
      • User Groups
      • Custom Roles
      • Audit Log
      • SCIM
      • 2FA
      • Password Restriction
      • Sign-in Restriction
      • Watermark
      • Manage License
      • Production Setup
      • Back up Data
      • Database Change Mode
      • AI Assistant
      • Database Instance
      • Environment Policy
      • Customize Logo
      • Announcement
      • SMTP and Email Delivery
      • Archive
      • Overview
      • Authentication
      • SQL Review
      • Release
      • Plan
      • Rollout
      • Issue
      • SQL Editor
      • Permission
      • Data Classification
      • Audit Log
      • Terraform
      • Slack
      • Jira
      • Supabase
      • Render
      • Neon
      • Server Startup Options
      • Error Code for Bytebase Core
      • Error Code for SQL Advisor
      • Schema Definition Language
    • SQL Editor

    Data Masking

    This feature is available in Enterprise Plan.

    Workspace Admins and DBAs can configure data masking policy to prevent unauthorized access to the sensitive data.

    query result

    When user exports the data, Bytebase still respects the masking policy to mask exported columns if enforced.

    export data mask

    Edit this page on GitHub
    Previous articleAdmin Mode
    Next articleManage SQL Scripts

    All-in-One Database Workflows

    Schema migrations, adhoc changes, just-in-time (JIT) database access, and data masking in one place.

    πŸ•ΉοΈ Live Demo

    DATABASES

    • MySQL
    • PostgreSQL
    • Oracle
    • SQL Server
    • MariaDB
    • MongoDB
    • Redis
    • Snowflake
    • TiDB
    • More...

    INTEGRATIONS

    • GitLab
    • GitHub
    • Bitbucket
    • Azure DevOps
    • Slack
    • Discord
    • Teams
    • DingTalk
    • Lark
    • WeCom

    COMPARISONS

    • vs. Liquibase
    • vs. Flyway
    • vs. CloudBeaver
    • vs. DBeaver
    • vs. Navicat
    • vs. Metabase
    • vs. schemachange
    • vs. Jira

    RESOURCES

    • Resources
    • Documentation
    • Changelog
    • Terms
    • Policy
    • Security
    • Partners

    COMPANY

    • About
    • Brand
    • Contact
    Bytebase LogoBytebase logo
    GithubDiscordTwitterYoutubeLinkedIn
    SOC2 badge

    Β© 2025 Bytebase. All Rights Reserved. ζ²ͺICP倇2024059253号

    SOC2 badgeΒ© 2025 Bytebase. All Rights Reserved. ζ²ͺICP倇2024059253号