--- title: Apply Sensitivity Level Tags (Project) description: Apply Sensitivity Level Tags (ApplySensitivityLevelTags) makes the generated artifacts tag table columns with the Data Classification of their terms. --- [Skip to content](https://knowledge.bigenius-x.com/apply-sensitivity-level-tags-project#main-content) [Contact us](https://knowledge.bigenius-x.com/kb-tickets/new?hsLang=en) [Go to Customer Portal](https://knowledge.bigenius-x.com/customer-portal?hsLang=en) [![TRI\_Logo\_biGENIUS\_2020\_RGB\_s](https://knowledge.bigenius-x.com/hs-fs/hubfs/Marketing/TRI_Logo_biGENIUS_2020_RGB_s.png?width=150&height=42&name=TRI_Logo_biGENIUS_2020_RGB_s.png)](https://www.bigenius-x.com/) Open main navigation Close main navigation - [Contact us](https://knowledge.bigenius-x.com/kb-tickets/new) - [Go to Customer Portal](https://knowledge.bigenius-x.com/customer-portal) How can we help you? - There are no suggestions because the search field is empty. 1. [biGENIUS-X Knowledge Base](https://knowledge.bigenius-x.com/?hsLang=en) 2. [Generators](https://knowledge.bigenius-x.com/generators?hsLang=en) 3. [Properties](https://knowledge.bigenius-x.com/generators?hsLang=en#properties) # Apply Sensitivity Level Tags (Project) **Applies to** Platform: Snowflake · Snowflake dbt · Databricks · Databricks dbt Apply Sensitivity Level Tags (ApplySensitivityLevelTags) makes the generated artifacts tag table columns with the Data Classification of their terms. Use it when [Snowflake tag-based masking policies](https://docs.snowflake.com/en/user-guide/tag-based-masking-policies) or [Databricks attribute-based access control](https://docs.databricks.com/aws/en/data-governance/unity-catalog/abac/) policies must find sensitive columns. Each classified column then gets the tag named in [Sensitivity Level Tag Name](https://knowledge.bigenius-x.com/sensitivity-level-tag-name-project?hsLang=en), with the classification as the tag value. Available since Generator 2.2; Snowflake dbt has it since its first release, Generator 2.4. ### Values and defaults - `true`: the artifacts set the tags described below. - `false` (default): no tags and no governance files are generated. The property is a checkbox in the Governance group of the Additional Settings in Project Settings. ### Prerequisites - Classify the terms: when you [edit a term](https://knowledge.bigenius-x.com/edit-a-term?hsLang=en), set Data Classification to `Public Data`, `Internal Data`, `Confidential Data` or `Restricted Data`. The selected text is the tag value. Terms without a classification get no tag. ![Data Classification field of Edit Term set to Confidential Data, with the checkbox Apply change to Data Lineage below it](https://knowledge.bigenius-x.com/hs-fs/hubfs/knowledge_base_screenshots/apply-sensitivity-level-tags-project-data-classification.png?width=620&height=78&name=apply-sensitivity-level-tags-project-data-classification.png) - Databricks: [Use Unity Catalog](https://knowledge.bigenius-x.com/unity-catalog-project?hsLang=en) must be `true`, its default. With `false`, no tags are generated. - Databricks and Databricks dbt: the generator does not create the tag on Databricks. Create it in Unity Catalog before you run the notebook or dbt. - Privileges on Snowflake: creating the tag needs CREATE TAG on the governance schema. Setting it on a column needs APPLY on the tag and ownership of the table, or the account privilege APPLY TAG ([Work with object tags](https://docs.snowflake.com/en/user-guide/object-tagging/work)). - Privileges on Databricks: APPLY TAG on the table, USE SCHEMA and USE CATALOG on its parents, and ASSIGN on a governed tag ([Apply tags to Unity Catalog securable objects](https://docs.databricks.com/aws/en/database-objects/tags)). On Snowflake, the generated `CREATE TAG` statement uses `PROPAGATE = ON_DEPENDENCY`. Snowflake supports this parameter only in Enterprise Edition or higher ([CREATE TAG](https://docs.snowflake.com/en/sql-reference/sql/create-tag)), so the statement fails on other editions. Deploy to an account with Enterprise Edition or higher. ### Effect on generated output Tags are set on the columns of generated tables only; views carry no tag. #### Snowflake `deploy.sql` runs `SQL/deploy_prerequisites.sql` before `SQL/deploy_all_layers.sql`, on every deployment. The script creates the governance schema and the tag if they do not exist. In the table scripts, each classified column ends with a `WITH TAG` clause. Replace the placeholders `governance#tags#database_name` and `governance#tags#schema_name` with the database and schema that hold the tag ([Replace the placeholders in the artifacts](https://knowledge.bigenius-x.com/replace-the-placeholders-in-the-artifacts?hsLang=en)). #### Snowflake dbt `dbt_project.yml` gets the post-hook `apply_column_tags` and the vars `governance_tags_database` and `governance_tags_schema`, generated as ``: set them to the tag's database and schema. Classified columns in the model YAML files get `meta.snowflake_tags`. After a table model runs, the post-hook reads the current value with `SYSTEM$GET_TAG` and sets new or changed values with `ALTER TABLE ... MODIFY COLUMN ... SET TAG`. View and ephemeral models are skipped. The macro `create_governance_tags` creates the schema and the tag; run it with `dbt run-operation create_governance_tags` before the first `dbt run` that sets tags. #### Databricks The artifacts contain the notebook `Jupyter/_apply_data_sensitivity_tags.ipynb`, where `` is the project name. It lists every classified column of the generated tables and runs `ALTER TABLE ... ALTER COLUMN ... SET TAGS` for each. `deploy.ps1` uploads it with the other notebooks, but the deployment notebook does not run it. Run it after the deployment. #### Databricks dbt The post-hook `apply_column_tags` works as on Snowflake dbt. It reads the column metadata `meta.databricks_tags`, compares it with `information_schema.column_tags` and runs `ALTER TABLE ... ALTER COLUMN ... SET TAGS` for new or changed values. The notebook and the dbt post-hooks only set tags. When you remove a classification, they leave the existing tag on the column. ### Example On Snowflake, the business key `CUSTOMER_ID` of the Hub `load_customer_hub` is classified `Confidential Data`, and the tag name is the default. `SQL/deploy_prerequisites.sql` contains: ``` CREATE SCHEMA IF NOT EXISTS {governance#tags#database_name}.{governance#tags#schema_name}; CREATE TAG IF NOT EXISTS {governance#tags#database_name}.{governance#tags#schema_name} .SENSITIVITY_LEVEL PROPAGATE = ON_DEPENDENCY; ``` The Hub table script tags the column (line breaks added): ``` CREATE OR REPLACE TABLE ... RDV_HUB_LOAD_CUSTOMER_HUB ( BG_LOADTIMESTAMP TIMESTAMP_TZ NOT NULL ... ,HUB_HK BINARY(32) NOT NULL ... ,BG_SOURCESYSTEM VARCHAR NULL ... ,CUSTOMER_ID INTEGER NOT NULL WITH TAG ( {governance#tags#database_name}.{governance#tags#schema_name} .SENSITIVITY_LEVEL = 'Confidential Data') ... ``` On Databricks, the same term gives this statement in the tags notebook. `` and `` stand for the placeholders of the Raw Vault layer. ``` ALTER TABLE ..rdv_hub_load_customer_hub ALTER COLUMN customer_id SET TAGS ('sensitivity_level' = 'Confidential Data') ``` ### Related articles - Previous: [Edit a Term](https://knowledge.bigenius-x.com/edit-a-term?hsLang=en) - Reference: [Sensitivity Level Tag Name (Project)](https://knowledge.bigenius-x.com/sensitivity-level-tag-name-project?hsLang=en), [Use Unity Catalog (Project)](https://knowledge.bigenius-x.com/unity-catalog-project?hsLang=en) - See also: [Manage Project settings and Generator configuration](https://knowledge.bigenius-x.com/manage-project-settings-and-generator-configuration?hsLang=en), [Replace the placeholders in the artifacts](https://knowledge.bigenius-x.com/replace-the-placeholders-in-the-artifacts?hsLang=en), [Generators Release - 2.2.0](https://knowledge.bigenius-x.com/generators-release-2.2.0?hsLang=en) - [Getting started](https://knowledge.bigenius-x.com/getting-started?hsLang=en#main-content) - [Guidelines](https://knowledge.bigenius-x.com/getting-started?hsLang=en#guidelines) - [Start working](https://knowledge.bigenius-x.com/getting-started?hsLang=en#start-working) - [Account](https://knowledge.bigenius-x.com/getting-started?hsLang=en#account) - [General overview](https://knowledge.bigenius-x.com/general-overview?hsLang=en) - [Artificial Intelligence](https://knowledge.bigenius-x.com/artificial-intelligence?hsLang=en) - [Application Modules](https://knowledge.bigenius-x.com/application-modules?hsLang=en#main-content) - [Administration](https://knowledge.bigenius-x.com/application-modules?hsLang=en#administration) - [Solutions](https://knowledge.bigenius-x.com/application-modules?hsLang=en#solutions) - [Global Features](https://knowledge.bigenius-x.com/application-modules?hsLang=en#global-features) - [Projects](https://knowledge.bigenius-x.com/application-modules?hsLang=en#projects) - [Branches](https://knowledge.bigenius-x.com/application-modules?hsLang=en#branches) - [Data Connections](https://knowledge.bigenius-x.com/application-modules?hsLang=en#data-connections) - [Dataflow Modeling - Overview](https://knowledge.bigenius-x.com/application-modules?hsLang=en#dataflow-modeling-overview) - [Dataflow Modeling - Wizard Steps](https://knowledge.bigenius-x.com/application-modules?hsLang=en#dataflow-modeling-wizard-steps) - [Dataflow Modeling - Terms](https://knowledge.bigenius-x.com/application-modules?hsLang=en#dataflow-modeling-terms) - [Dataflow Modeling - Term Mapping](https://knowledge.bigenius-x.com/application-modules?hsLang=en#dataflow-modeling-term-mapping) - [Dataflow Modeling - Relationships](https://knowledge.bigenius-x.com/application-modules?hsLang=en#dataflow-modeling-relationships) - [Dataflow Modeling - Data Quality](https://knowledge.bigenius-x.com/application-modules?hsLang=en#dataflow-modeling-data-quality) - [Dataflow Modeling - Indexes](https://knowledge.bigenius-x.com/application-modules?hsLang=en#dataflow-modeling-indexes) - [Relationship Modeling](https://knowledge.bigenius-x.com/application-modules?hsLang=en#relationship-modeling) - [Generate Artifacts](https://knowledge.bigenius-x.com/application-modules?hsLang=en#generate-artifacts) - [Project Settings](https://knowledge.bigenius-x.com/application-modules?hsLang=en#project-settings) - [Data Marketplace](https://knowledge.bigenius-x.com/application-modules?hsLang=en#data-marketplace) - [Generators](https://knowledge.bigenius-x.com/generators?hsLang=en#main-content) - [Fabric Warehouse](https://knowledge.bigenius-x.com/generators?hsLang=en#fabric-warehouse) - [Fabric Lakehouse](https://knowledge.bigenius-x.com/generators?hsLang=en#fabric-lakehouse) - [Databricks](https://knowledge.bigenius-x.com/generators?hsLang=en#databricks) - [Snowflake](https://knowledge.bigenius-x.com/generators?hsLang=en#snowflake) - [Microsoft SQL Server](https://knowledge.bigenius-x.com/generators?hsLang=en#microsoft-sql-server) - [Artifacts](https://knowledge.bigenius-x.com/generators?hsLang=en#artifacts) - [Replace Placeholders](https://knowledge.bigenius-x.com/generators?hsLang=en#replace-placeholders) - [Target solution environment](https://knowledge.bigenius-x.com/generators?hsLang=en#target-solution-environment) - [Deployment](https://knowledge.bigenius-x.com/generators?hsLang=en#deployment) - [Deployment with an Azuze DevOps pipeline](https://knowledge.bigenius-x.com/generators?hsLang=en#deployment-with-an-azuze-devops-pipeline) - [Delta Deployment](https://knowledge.bigenius-x.com/generators?hsLang=en#delta-deployment) - [Load control environment](https://knowledge.bigenius-x.com/generators?hsLang=en#load-control-environment) - [Load data with a native load control](https://knowledge.bigenius-x.com/generators?hsLang=en#load-data-with-a-native-load-control) - [Load data with Apache Airflow](https://knowledge.bigenius-x.com/generators?hsLang=en#load-data-with-apache-airflow) - [Model Object Type](https://knowledge.bigenius-x.com/generators?hsLang=en#model-object-type) - [Properties](https://knowledge.bigenius-x.com/generators?hsLang=en#properties) - [Default Terms](https://knowledge.bigenius-x.com/generators?hsLang=en#default-terms) - [Discovery application](https://knowledge.bigenius-x.com/discovery-application?hsLang=en#main-content) - [Discovery configurations](https://knowledge.bigenius-x.com/discovery-application?hsLang=en#discovery-configurations) - [Best practices](https://knowledge.bigenius-x.com/best-practices?hsLang=en#main-content) - [Modeling Approaches](https://knowledge.bigenius-x.com/best-practices?hsLang=en#modeling-approaches) - [Use Cases](https://knowledge.bigenius-x.com/best-practices?hsLang=en#use-cases) - [Business Rules](https://knowledge.bigenius-x.com/best-practices?hsLang=en#business-rules) - [Data Quality Rules](https://knowledge.bigenius-x.com/best-practices?hsLang=en#data-quality-rules) - [FAQs](https://knowledge.bigenius-x.com/faqs?hsLang=en) - [Product Release Notes](https://knowledge.bigenius-x.com/product-release-notes?hsLang=en#main-content) - [SaaS Application](https://knowledge.bigenius-x.com/product-release-notes?hsLang=en#saas-application) - [Discovery application](https://knowledge.bigenius-x.com/product-release-notes?hsLang=en#discovery-application) - [Generators](https://knowledge.bigenius-x.com/product-release-notes?hsLang=en#generators) - [Legal Documents](https://knowledge.bigenius-x.com/legal-documents?hsLang=en#main-content) - [Current legal docs](https://knowledge.bigenius-x.com/legal-documents?hsLang=en#current-legal-docs) - [Software Product and Limits](https://knowledge.bigenius-x.com/legal-documents?hsLang=en#software-product-and-limits) - [Contact us](https://knowledge.bigenius-x.com/kb-tickets/new?hsLang=en) - [Customer Portal](https://knowledge.bigenius-x.com/customer-portal) - [Sign in](https://knowledge.bigenius-x.com/_hcms/mem/login) [![biGENIUS logo](https://knowledge.bigenius-x.com/hubfs/TRI_Logo_biGENIUS_2020_RGB-1.svg "biGENIUS logo")](https://www.bigenius-x.com) All rights reserved © 2025, biGENIUS AG