web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

Hide sensitive e-mails based on security role

(0) ShareShare
ReportReport
Posted on by

Hi,

Requirement of our customer, using cases in customer service (v9.0.2, using UI):

- Certain users have a sensitive security role ("Security Officer", let's say).

- Certain cases are handled by customer care agents ("Customer Service Employee" security role). They sometimes have to involve a security officer, so the case is assigned to a security officer.

- The security officer mostly uses the timeline to start inbound and outbound communication.

- In some cases but not always, some e-mails are necessary for the SO to be logged on the case timeline, but they contain sensitive information that can only be viewed by other security officers and should be hidden from everyone else. Meaning: they would like to have some sort of "Sensitive information" bool on their e-mail form. 

I'm not sure how to tackle this. What I thought I could do was:

- Add a "sensitive" switch on the e-mail form. This is an easy one, I just added field level security to this switch so only SO's can edit this. 

- I thought I'd add a JS that dynamically hides all fields when the "Sensitive information" option is set to true.

This isn't ideal, because no one likes a blank page :) Moreover, I'd have to start fidgeting with the Timeline as well, and I'm pretty sure you could just retrieve this information through the activity view or an advanced find. That would cause some serious grief. 

Anyone ever encountered a similar issue? Is there another way I could tackle this, without needing to resort to custom plugins? I'd like to explore a non-custom route, first. Thanks!

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    Wayne Walton Profile Picture
    13,730 on at

    To my knowledge, there is absolutely no non-custom way to handle this.  Not only does JS-hiding not actually secure fields (you can expose them through Advanced find or Excel Export), but Activities have a common security model with high degrees of visibility by design.

    In short, this would be my recommendation:

    1. Create a non-activity entity called "Secure Emails"

    2. Set up a security role for Security Officers

    3. Add a field on out of the box emails called "Secure" and add field level security to it that only Security Officers can select it.

    4. Create a plugin that creates a new "Secure Email" record whenever the "Secure" field is checked.

    5. Copy content from Email to "Secure Email" record and delete the content out of the email record with a field that says "Secured"

    This  will keep the email in the timeline, but not the data that needs securing.  Then Security Officers can look at the Secured Emails with their specific permission.

  • Suggested answer
    Temmy Wahyu Raharjo Profile Picture
    2,916 on at

    Hi,

    There are couple options for this. Maybe you can consider enable Security Attribute:

    msdn.microsoft.com/.../gg328273.aspx

    If you want to add security based on the record, you can consider using Access Team. So basically you can create plugin and use AddMemberTeamRequest (msdn.microsoft.com/.../dn932132.aspx).

    See which one more easier for you.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans