Hello everyone,
I work with D365 Sales Server version :
9.2.25101.00143
Use-case is I need to upgrade the security onto the CRM. Especially certain fields that need appropriate access.
In a sandbox ENV I created a new column for the account entity. I published and tested, the column was accessible through views (adding columns).
I then applied FLS by checking the box "Activate security on the column". After a publish and a browser cache refresh, as intended, I observe the absence of the column in the column list.
To be capable of seeing the column and testing the possibilities, I assigned myself Admin sys security role temporarily. The column got available again, for now it makes sense.
But now that I want to observe if the reverse operation is doable, by removing the Admin sys security role, (while the Field Level Security is still active) I should observe the vanishing of the column.
Instead, the column is still available for me to see. It shouldn't. (I also waited days)
I tried clearing the browser cache, de-activating and re-activating FLS. It seems that its not working.
As for the actual case my security role is only "Sales App entreprise Access".
The doc says : "
Unless one or more security profiles are assigned to a security enabled field, only Customer Engagement (on-premises) users with the system administrator security role will have access to the field.
"
I did test with a user, (deleted his cache) and
he is still capable of seeing the FLS ON columns through view customisation.
This user has a normal grouped security role but no Security profile on.
I searched the internet and came accros good guidelines
here (2017)
This was also a good resource.
But I wasn't able to find a solution like "Ctrl+Shift+R" does magic with dynamics 365.
One of my hypothesis was that once someone had the privilege to see the column, it keeps the priv. Unless there is an action to reset this
Thanks for reading,
Feel free to ask questions, I'll add more details.