Skip to main content

Notifications

Announcements

No record found.

Customer experience | Sales, Customer Insights,...
Suggested answer

Real time journey - field level security

(1) ShareShare
ReportReport
Posted on by 22

Hi,

When selecting attribute on real time marketing journey, I could not choose field that has column security enabled as it is greyed out.

I am system admin, and I have tried adding "d365 marketing" user to the field security profile, but no luck.

Anything that I missed?

Thanks!

  • roshanmehta Profile Picture
    roshanmehta 2 on at
    Real time journey - field level security
    Hi all,
     
    Microsoft has identified this as a known issue on their end. They ran a mitigation script on our environment to fix the problem and we can now use a secured field in segments. Note that Microsoft has planned a fix for all instances, but have not indicated a date for it yet.
  • Real time journey - field level security
    There is no FLS PRofile to switch in my environementShrShankar do you know if it is a preview setting?
  • Yulya Toporochan Profile Picture
    Yulya Toporochan 84 on at
    Real time journey - field level security
    Ok, so which service user do I need to add? Which service user is running Real-time journeys?
     
  • Real time journey - field level security
    Hi,
    knowing this post is quite old but I ran into a similar issue. I want to create a Real-Time-Marketing Segment based on an attribute on the contact, which is behind FLS. The attribute is greyed out in the selection. I already tried adding myself to the FLS as well as the # D365 Marketing user, without any luck.
    ShrShankar mentioned that one would need to add the service users to the FLS, if this is the case, which users are those exactly and if specific to the environment, where can I look them up?
    Any help is appreciated
  • Suggested answer
    ShrShankar Profile Picture
    ShrShankar on at
    RE: Real time journey - field level security

    Some context on how this works:

    Our service users/application users (the bots that send the emails) do not run under the identity of the user who created the journey (RTM does not allow impersonation). They run under the service user identity. These service users cannot access fields that have Field Level Security (FLS), unless they are specifically added to the customer field security profile (aka group of users that can access the secured field).

     

    In this case, we can only do one of two things:

    1. Flip the FLS protection - Add the service users to the list of access groups for these FLS protected attributes – In this case, everyone in the system who can run journeys will be able to render values in these fields even if they themselves are not part of the FLS access groups. Once this is complete, we need to enable a feature flag that currently does not allow FLS enabled attributes for personalization. 

    2. Aggressively lock down who can publish journeys and through that, protect who will be able to see the data, as the person publishing the journey will have the option to review what’s happening prior to publishing. – You can enable this only for admins in your case.

  • crsnt Profile Picture
    crsnt 22 on at
    RE: Real time journey - field level security

    I tried adding trigger too, it doesn't show up.

    I tried adding all *marketing* users to the field security profile, still doesn't work. Is it a bug?

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,280 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,253 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans