Implementation of data protection concept for data warehouse

In the subsequent process (for example, when creating BI reports), the encrypted attributes for data aggregation can be temporarily decrypted. However, personal data is always stored in encrypted form in the reports themselves, which are made available to the user department. Role-based views that allow access to the encrypted data are controlled by a central policy. This means that for some defined roles the data is decrypted for display, for other roles it is partially decrypted, while for the remaining roles only the encrypted values are displayed. The role concept is realized by connecting to an Active Directory.