Data Insight User Guides
DDR Data Scrambling – End-to-End Step-by-Step User Guide
This guide explains how to configure Data Scrambling during DDR Data Refresh, Object Refresh, or System Refresh. It covers Scramble at Source, Scramble at Target, pattern selection, custom scrambling rule creation, final preview, and template release.
Introduction to DDR Data Scrambling
Data Scrambling in Dynamic Data Replicator protects sensitive information during SAP data replication by obfuscating, replacing, randomising, or anonymising selected fields. This helps organisations make realistic SAP data available in non-production systems while reducing the risk of exposing personal, commercial, financial, or confidential data.
The feature is used during the final stage of the DDR wizard for Data Refresh, Object Refresh, or System Refresh. The user selects the required scrambling mode, includes the required scrambling patterns, reviews the preview panel, and releases the template for controlled execution.
Important: Data Scrambling is intended for non-production systems. The selected configuration should follow the organisation’s internal security, GDPR, data privacy, and compliance requirements.
Technical Benefits and Business Advantages
Sensitive values can be protected before test, support, training, or development users access copied SAP data.
Teams can work with realistic business records without exposing original sensitive values.
Reusable scrambling patterns and rules standardise how sensitive fields are protected across refreshes.
Data can be scrambled before leaving the source or before being inserted into the target, depending on the risk model.
The preview and release process helps ensure the selected template and scrambling profile are reviewed before execution.
Scrambling is built into the DDR replication flow, reducing separate post-copy masking activities.
Open the Scramble Mode Step in the Object Refresh Wizard
In the final stage of the DDR wizard, the user reaches the Scramble Mode screen. The preview panel on the right-hand side confirms the selected template type, template name, transfer type, connection, process, business object, technical table setting, current data scramble status, and selected profile.
At this stage, the default mode may be set to None. This means no scrambling profile will be applied unless the user selects a scrambling mode and includes one or more patterns.
Select the Required Scrambling Method
Open the Mode dropdown and select the required scrambling method. DDR supports the following options depending on the replication design and system setup:
| Scrambling Mode | Meaning | When to Use |
|---|---|---|
| None | No scrambling is applied to the replicated data. | Use only when the data is non-sensitive or when scrambling is not required for the specific template. |
| Scramble at Source | Data is scrambled during the export process before it leaves the source system. | Use when the organisation requires the highest protection level because sensitive values should not leave the source system in clear form. |
| Scramble at Target | Data is scrambled before it is inserted into the target tables. | Use when the organisation wants flexibility during transfer but still requires protected values in the target non-production system. |
| In-Place Scrambling | Existing data in the target system is scrambled after it is already present. | Use only where supported and where a loop-back connection is available for target-side processing. |
Security note: Scramble at Source is generally the most secure option because sensitive values are transformed before they leave the source SAP system.
Choose Scrambling Patterns for the Replication
After selecting a scrambling mode, DDR displays the available scrambling patterns. The user selects the required pattern and clicks Include. Included patterns are moved into the Selected Patterns section and are shown in the preview panel as the active scrambling profile.
To remove a pattern from the template, select it from the selected patterns area and click Exclude. This allows the user to control exactly which rules are applied during replication.
Displays all active scrambling patterns that can be assigned to the replication template.
Displays the final scrambling patterns that will be applied when the template is executed.
Use Scramble at Target Where Target-Side Protection Is Required
When Scramble at Target is selected, DDR applies the configured scrambling before data is inserted into the target tables. This is useful where the source export process can remain unchanged, but the target non-production data must still be protected.
The same pattern selection process is used. The user selects the required patterns, includes them, checks the preview, and continues with the template release process.
Create or Maintain a Scrambling Policy During Replication Setup
If the required scrambling policy does not already exist, the user can click Add Scrambling Rule. This opens the DDR Central Console rule maintenance screen where patterns, groups, policies, rules, and fields can be reviewed or created.
This allows advanced users to build a custom scrambling policy during replication setup and then add that policy to the replication template.
| Area | Purpose |
|---|---|
| Pattern | Groups together one or more policies into a reusable scrambling pattern. |
| Group | Organises scrambling rules into logical sets for easier management. |
| Policy | Defines the rule logic used for scrambling selected fields. |
| Fields | Lists the table names and field names where the selected policy is applied. |
Confirm and Release the Template
After the required scrambling mode and patterns have been selected, continue to the final confirmation step. DDR asks the user to confirm whether the template should be finalised and released for Data Replication.
Review the selected mode, profile, transfer type, connection, and business object carefully before confirming. Once the template is released, it cannot be modified directly. If changes are required later, copy the template and create a new version.
Release note: Released templates cannot be modified. Always confirm the scrambling profile before release.
Scrambling Functions in DDR
| Function Type | Description | Example Use |
|---|---|---|
| Random Function | Generates random replacement values based on the field type and rule design. | Randomise names, numbers, addresses, identifiers, or selected characters while keeping format consistency. |
| Fixed Value | Replaces selected fields with a constant value during replication. | Set all sensitive text fields to a controlled value such as MASKED or TEST. |
| Custom Function | Allows advanced logic using multiple fields or more complex transformation rules. | Apply business-specific masking logic where a simple random or fixed value is not enough. |
Recommended Control Checks Before Execution
- Confirm the replication is for a non-production target system.
- Confirm the correct connection and business object are displayed in the preview panel.
- Confirm the scrambling mode matches the organisation’s data protection requirement.
- Confirm all required scrambling patterns are included and unwanted patterns are excluded.
- Confirm the selected profile name in the preview panel before releasing the template.
- Confirm that the required scrambling policies are active and mapped to the correct fields.