# Restrict Date of Birth visibility to only authorized users in ISC **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** access-requests, identity-security-cloud\ **Created:** [July 15, 2026, 1:10pm UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540 "2026-07-15T13:10:22Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![pguduri](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pguduri/32/37888_2.png) [@pguduri](https://developer.sailpoint.com/discuss/u/pguduri)\ **Post date:** [July 15, 2026, 1:10pm UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/1 "2026-07-15T13:10:22Z")
> Hi all, > > We need to protect DOB in ISC , it comes from our authoritative HR source (JDBC) and is mapped as an identity attribute. Requirement: only certain authorized users should see it, not everyone who can view identities > > Is there any way to mask or restrict visibility of a specific identity attribute (by user level or governance group)? ---
**Author:** ![UjjwalJain](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ujjwaljain/32/24704_2.png) [@UjjwalJain](https://developer.sailpoint.com/discuss/u/UjjwalJain)\ **Post date:** [July 15, 2026, 1:44pm UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/2 "2026-07-15T13:44:14Z")
Hi @pguduri, I don’t believe there is a way to enforce that restriction. If that attribute is required, a better approach would be to mask the value before storing it on the identity and then unmask it wherever it needs to be used. ---
**Author:** ![mpotti](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mpotti/32/2916_2.png) [@mpotti](https://developer.sailpoint.com/discuss/u/mpotti)\ **Post date:** [July 15, 2026, 2:28pm UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/3 "2026-07-15T14:28:16Z")
I think this is what you are looking for. > **[Data Segmentation Overview - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/segmentation/index.html?h=data+seg)** > > SailPoint Identity Services Documentation ---
**Author:** ![smukhija](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/smukhija/32/3759_2.png) [@smukhija](https://developer.sailpoint.com/discuss/u/smukhija)\ **Post date:** [July 15, 2026, 6:14pm UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/4 "2026-07-15T18:14:57Z")
SailPoint Identity Security Cloud (ISC) currently does not support **user attribute-level masking** or **user-level data segmentation**. The recently introduced **Data Segmentation** feature enables organizations to restrict access at the **role** and **entitlement** level. With Data Segmentation, designated users can view and manage only the roles and entitlements within the segments they have been granted access to. This includes the ability to name, describe, create, configure, and maintain roles and entitlements that fall within their assigned scope. More details are available in the SailPoint **Data Segmentation** documentation: [Data Segmentation Overview - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/segmentation/index.html). ---
**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\ **Post date:** [July 15, 2026, 6:51pm UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/5 "2026-07-15T18:51:43Z")
> [@pguduri](#): > > Is there any way to mask or restrict visibility This is not foolproof, but might work as a compromise between security and getting the work done 1. Using JDBC Buildmap rule, encrypt the DOB. (Securely storing and using of encryption key in this step is crucial.) 2. Same encrypted value is written to Identity attribute 3. Create a Interactive Trigger Workflow that can call a Powershell script and pass the DOB identity attribute that is in encrypted format. 4. Powershell script will decrypt the string and return the DOB (using the same key as in Step 1) 5. Limit the access to the Launcher to users who are authorised to view the DoB. ---
**Author:** ![vguleria](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vguleria/32/7884_2.png) [@vguleria](https://developer.sailpoint.com/discuss/u/vguleria)\ **Post date:** [July 17, 2026, 9:51am UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/6 "2026-07-17T09:51:58Z")
Hi @PragatiGupta In my opinion, this is not something you should try and achieve in ISC. For similar scenario, you could create a report or may be some other report showing the required data. I have prior experience of PowerBI reporting where there is a possibility of Row level security which you can use to provide access to these authorized persons to see sensitive information. Thank You. Regards Vikas. ---
**Author:** ![rohit\_wekhande](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rohit_wekhande/32/28501_2.png) [@rohit\_wekhande](https://developer.sailpoint.com/discuss/u/rohit_wekhande)\ **Post date:** [July 17, 2026, 10:57am UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/7 "2026-07-17T10:57:54Z")
Hello, From the UI Customization perspective, you cannot perform a restriction on identity attribute getting displayed only to subset of the users in ISC. As of today, its not available in sailpoint ISC i think. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [September 15, 2026, 10:58am UTC](https://developer.sailpoint.com/discuss/t/restrict-date-of-birth-visibility-to-only-authorized-users-in-isc/216540/8 "2026-09-15T10:58:26Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.