u/--playground--

I’m trying to use ABAC column masking in Databricks for an integer column.

Example:

Original value:

12345678

Expected masked value:

1234****

The issue is that Databricks requires the UDF parameter type to match the source column type exactly when creating a column mask.

Since my column is INT/BIGINT, I cannot directly return a partially masked string unless I cast it, but then the return type no longer matches the original column type.

What is the recommended approach for masking numeric IDs like this using ABAC?