To leverage dynamic data masking, the database must be defined on Kron PAM with credentials to get the schema, table, and column names.