Security - Field Security

In this blog, you will learn about Field Security.

Introduction

 

Record-level permissions are granted at the entity level, but there may be certain fields associated with an entity that contain data that is more sensitive than the other fields. In such cases, use field-level security to control access to specific fields. The scope of field-level security is organization-wide and applies to all data access requests, including the following:

• Data access requests from within a client application, such as web browser, mobile client, or Microsoft Dynamics 365 for Outlook.
• Web service calls using the Microsoft Dynamics 365 SDK (for use in plug-ins, custom workflow activities, and custom code)
• Reporting (using Filtered Views)

Field level security is managed by the security profiles. Security profile determines permissions to secure fields, users, and teams.

 

Permissions that can be granted to the user using field-level security include Read, Create, and Update. A combination of these three permissions can be configured to determine the user privileges for a specific data field.

 

Restrict a field

 

A. Secure the field

1. Go to Settings > Customizations.
2. Click Customize the System.
3. Click Entities > Contact > Fields.
4. Click the field that the user wants to be restricted, click Edit.
5. Next to Field Security, click Enable, click Save and Close.
6. Publish the customization.

B. Configure the security profiles,

1. Create the field security profile for read-only access
1. Go to Settings > Security.
2. Click Field Security Profiles.
3. Click New, enter a name, access contact mobile phone, and click Save.
4. Click Users, click Add, select the users that you want to grant read access to the restricted field, and then click Add.
5. Click Field Permissions, click field which user wants to be restricted, click Edit, select Yes next to Allow Read, and then click OK.
2. Create the field security profiles for full access,
1. Click New, enter a name, access contact mobile phone, and click Save.
2. Click Users, click Add, select the users that you want to grant full access to the restricted field, and then click Add.
3. Click Field Permissions, click field which user wants to be restricted, click Edit, select Yes next to Allow Read, Allow Update, and Allow Create, and then click OK.
3. Click Save and Close.

Create a security profile

 

Go to Settings > Security > Field Security Profiles.

 

 

Select New from the command bar.

 

 

Give the profile a name and save it.

 

Add individual users or teams to the profile.

 

Open the field permissions area and select what level of access users or teams with this security profile will have to the secured fields.

 

All fields enabled for Field Security that appear on active forms will be listed. Select the field(s) the user wants to edit the permissions for and click Ok.