See how Field Security works
Click a topic and Controlly explains how Field Security works.
Anyone who may edit an employee can also change the job title. With Field Security you lock just that one field, for the permission sets you choose. The rest of the card stays editable.
Result for you
Critical fields are changed only by the people who own them.
See it in action
Watch this 3.5 minute demo: lock a field, show a user only part of a table and block the Release action.
Standard permissions are too coarse.
In Business Central a permission gives a user a whole table, a whole page or nothing. Real work is finer: Anna may post the order but not change the payment terms, a salesperson may see only their own orders, and only finance may release. Standard Business Central cannot do this.
All or nothing per table
Whoever may edit an employee can also change the job title or the posting groups.
Everyone sees everything
Every user with access sees all records of a table, including those of other departments.
No button can be switched off
Whoever may edit a sales order may also release it.
Decide who can change, see and do what
Compliance Field Security adds three kinds of control that standard Business Central does not have. You lock fields, hide records and block actions, and you link every rule to permission sets. The data owners set up the rules in Business Central themselves, without code.
- Fewer mistakes and less fraud: critical fields are changed only by their owners
- Segregation of duties: split a table per department and block single actions
- Data owners stay in control, and every change to the rules is logged
How it works
Field Security works inside Business Central, online and on-premises. A rule applies to every user who has one of the linked permission sets.
1. Install and register
Install the app from Microsoft Marketplace and register it. This starts a free 30-day trial.
2. Create a rule
Choose a field, filter or action and link the rule to permission sets. The wizard or Copilot gets you started.
3. Sign in again
Rules are loaded when a user signs in. After the next sign-in they are active.
Everything you need to control rights at field level
Field Security, Filter Security and Action Security in one app, alongside the standard Business Central permission model.
Field Security
Lock fields
Lock one field, such as the job title, or the whole table except a few fields. With your own error message, so users know who to ask.
Initial entry
Fill in once, then locked
Let users fill in an empty field once, but not change it afterwards. Useful for posting groups on new customers.
Filter Security
Hide records
Let a user see only the records, or edit only the records, that match your filter.
Calculated filters
Filters per user
A filter that follows the signed-in user, so that every salesperson sees only their own orders, for example.
Action Security
Block actions
Block actions such as Release for chosen users. The app comes with a list of actions for the standard pages.
Copilot
A rule from one sentence
Let Copilot propose a Field Security or Filter Security. You check the proposal and confirm.
Effective Securities
See who is covered
See per rule which users are covered and which are not, before you rely on it.
Change log
Every rule change logged
Changes to your rules and links go into the Business Central change log.
Starting and ending date
Rules active on time
Give every rule and every link a starting date, and optionally an ending date and a company.
What is in it for you?
Protection of financial data, with segregation of duties you can prove.
- Posting groups and payment terms can only be changed by their owners
- Orders released only by the finance team
- Every change to the rules recorded in the change log
Fine-grained rights without customization.
- Set up rules inside Business Central, without code
- Quickly set up with the wizard or Copilot
- See who is covered by a rule with Effective Securities
More value for your customers, on top of standard Business Central.
- Security at field, record and action level without customization
- Works online and on-premises
- A 30-day trial to test together with the customer
Good to know
Rules apply after signing in again
Rules are loaded when a user signs in. After a new or changed rule, users first need to sign out and in again.
Trial or license
Registration starts a free 30-day trial. Without a valid trial or license the app does not apply your rules.
Hiding works on pages
The filter type Visible hides records on the pages the app supports. Reports, queries and API pages show all records. The filter type Editable is checked on every save.
Start with field level security today.
- Runs alongside the standard Business Central permission model
- Set up without code, with the wizard or Copilot
- Start with a free 30-day trial
Built by 2-Controlware, specialists in authorization management for Microsoft Dynamics.
Frequently asked questions
Discover our complete package
In addition to Field Security, we offer the Authorization Box, Field Validation, Advanced Permissions Management and the Advanced Permissions Recorder to help you set up, manage and monitor your authorizations.
Authorization Box
Assign, manage, and monitor authorizations
The authorization solution for Microsoft Dynamics, for a more manageable and controllable environment.
Field Validation
Field validation on user level
Set up business rules for your data quality, so data complies before it is used in further processes.
Advanced Permissions Management
Track, review and roll back permission changes
See every permission set change, who made it and when, and undo a mistake in a few steps.
Advanced Permissions Recorder
Record, clean up and target permissions
Record the permissions of other users in a few clicks and clean up unnecessary entries automatically.
