web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Customer experience | Sales, Customer Insights,...
Unanswered

Security with Field Level Security, column based access

(1) ShareShare
ReportReport
Posted on by 25
Hello everyone,

I work with D365 Sales Server version : 9.2.25101.00143
Use-case is I need to upgrade the security onto the CRM. Especially certain fields that need appropriate access.
 
I found what I was looking for, using FLS : Microsoft Doc
 
In a sandbox ENV I created a new column for the account entity. I published and tested, the column was accessible through views (adding columns).
I then applied FLS by checking the box "Activate security on the column". After a publish and a browser cache refresh, as intended, I observe the absence of the column in the column list. 
 
To be capable of seeing the column and testing the possibilities, I assigned myself Admin sys security role temporarily. The column got available again, for now it makes sense.
 
But now that I want to observe if the reverse operation is doable, by removing the Admin sys security role, (while the Field Level Security is still active) I should observe the vanishing of the column.
Instead, the column is still available for me to see. It shouldn't. (I also waited days)
 
I tried clearing the browser cache, de-activating and re-activating FLS. It seems that its not working.

As for the actual case my security role is only "Sales App entreprise Access".

The doc says : "
Unless one or more security profiles are assigned to a security enabled field, only Customer Engagement (on-premises) users with the system administrator security role will have access to the field.
"
I did test with a user, (deleted his cache) and he is still capable of seeing the FLS ON columns through view customisation.
This user has a normal grouped security role but no Security profile on.

I searched the internet and came accros good guidelines here (2017)
This was also a good resource.
 
But I wasn't able to find a solution like "Ctrl+Shift+R" does magic with dynamics 365. 

One of my hypothesis was that once someone had the privilege to see the column, it keeps the priv. Unless there is an action to reset this


Thanks for reading,

Feel free to ask questions, I'll add more details.
Categories:
I have the same question (0)
  • Suggested answer
    #ManoVerse Profile Picture
    210 on at
    Security with Field Level Security, column based access

    When FLS is enabled on a column the column name may still appear in views (system or personal), even for unauthorized users. However, the data (value)  will not be appear to users without appropriate field security profile access. if you want to make it invisible from column list then set the field property  "Searchable" = No 

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Abhilash Warrier – Community Spotlight

We are honored to recognize Abhilash Warrier as our Community Spotlight honoree for…

Leaderboard > Customer experience | Sales, Customer Insights, CRM

#1
Rishabh Kanaskar Profile Picture

Rishabh Kanaskar 235

#2
MVP-Daniyal Khaleel Profile Picture

MVP-Daniyal Khaleel 175

#3
Tom_Gioielli Profile Picture

Tom_Gioielli 156 Super User 2025 Season 2

Last 30 days Overall leaderboard

Product updates

Dynamics 365 release plans