You must be connected to the database locally and have ABL security administrator and key store administrator privileges to create encryption policies with the Data Administration tool. For more information, see Learn about Security and Auditing.