Create a Dynamic Masking Policy

create_dynamic_mask_pol.sql

-- Create a Dynamic Masking Policy
CREATE OR REPLACE MASKING POLICY email_mask AS (val string) returns string ->
  CASE
    WHEN current_role() IN ('TASTY_ADMIN') 
        THEN VAL
    WHEN current_role() IN ('TASTY_TEST_ROLE') 
        THEN regexp_replace(val,'.+\@','*****@') -- leave email domain visible
    ELSE '*********'
  END
  ;