Finance | Project Operations, Human Resources, ...

How to expose only few fields in standard data entity in D365FO

(0) Share

Report

Posted on by Keerthanaa Ilangovan

Is exposing O-data entity allows to misuse the data's? We are having a custom table and in that we are using relation to customer table. Even though at a time our client can login to only one customer we do not want them to see other legal entity data's. Is there any way to force 3rd party application to add filter to the entity while they are consuming? Or is there any way to expose only selected fields without service class (like property in entity or staging table)?

I have the same question (0)

All responses (6)

Answers (0)

Sort by

Suggested answer

zhifeng Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hello Keerthanaa,

Below is one example you can refer show only selected fields.

List all the customers, but show only the first name and last name properties.docs.microsoft.com/.../odata

[Your organization's root URL]/data/Customers?$select=FirstName,LastName List all the customers, but show only the first name and last name properties.

Was this reply helpful? Yes No
Keerthanaa Ilangovan 59 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks for the reply. Is there any way to force the consuming 3rd party application to apply any filter (Eg: customer ID) on their API call (If they don't apply the filter no data should returned from the data entity).

Was this reply helpful? Yes No
Suggested answer

zhifeng Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

You can refer below article add filter for Odata call:

docs.microsoft.com/.../odata

Was this reply helpful? Yes No
Keerthanaa Ilangovan 59 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks for the reply Kevin.

Sorry if I have misinterpreted the question. My actual need is, I have a custom table which has a relationship to customer table. I'm creating a data entity for my custom table and exposing it via o-data. When a 3rd party application connects the data entity and reads the record, is there a way that I send the response only if there is a filter for customer ID (If there is no customer ID passed in the requesting API call, the data entity should not return any values) can this be achieved?

Was this reply helpful? Yes No
Suggested answer

André Arnaud de Cal... 306,290 Super User 2026 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi Keerthanaa,

This is not possible. Without a filter, OData will return all records. There is no option to enforce parameters. You can restrict access via Organization assignment to restrict the legal entities. If each customer is using an own login and if records in your table and other tables needs to be restricted, you can use eXtensible Data Security (XDS policies) to constrain the tables.

Was this reply helpful? Yes No
keerthanaa 5 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks for the reply André.

Was this reply helpful? Yes No