Ways to Control User Access to Fields
Use field-level security to control user access to fields. Use page layouts to control the layout and organization of detail and edit pages in Salesforce, the Self-Service Portal, and the Salesforce Customer Portal.
Required Editions
| Available in: both Salesforce Classic and Lightning Experience |
| Page layouts and search layouts available in: All Editions |
| Field-level security available in: Enterprise, Performance, Unlimited, Developer, and Database.com Editions |
Important When you use page layouts to hide fields from detail and edit pages, users
can still see these fields via reports, search results, list views, and the API. To restrict
field access, use field-level security. Search doesn’t return results for records with fields
protected by field level security. In some rare situations, when search terms match field values
protected by field-level security, the associated records are returned but without the protected
fields and their values.
Don’t use page layouts to secure data. For example, removing the Edit button from a page layout doesn’t prevent users from using inline editing. To prevent users from editing data, use sharing rules, field-level security, page layout field properties, validation rules, object permissions, and Visualforce pages.
Field-Level Security
- Restrict users’ access to view and edit fields. For example, restrict access in reports, search results, list views, related lists, email, and mail merge templates, custom links, Connect Offline. Also restrict API access and when synchronizing data or importing personal data.
- Override less-restrictive field access settings in page layouts and mini page layouts. For example, if a page layout requires a field that’s read-only in field-level security settings, the field remains read-only for the user.
- Override less-restrictive field settings in search layouts. For example, if a field is visible in the search layout but hidden via field-level security settings, the field remains hidden.
Page Layouts
- Control the layout and organization of detail and edit pages.
- Control which fields, related lists, and custom links users see, on detail and edit pages only.
- Control which standard and custom buttons display on detail pages and related lists.
- Determine whether fields are visible, read only, or required, on detail and edit pages only.
- Determine the fields that users can import data into.
- In Personal, Contact Manager, Group, and Professional Editions, page layouts control
which fields users can access in:
- related lists and list views
- reports
- Connect Offline
- email and mail merge templates
- custom links
- In Professional, Enterprise, Unlimited, Performance, and Developer Editions, determine
aspects of mini page layouts, including:
- record type
- profile associations
- related lists
- fields and field access settings
Tip To automatically add a field to all page layouts and make it visible and
required everywhere regardless of field-level security, make it a universally required
field.
Did this article solve your issue?
Let us know so we can improve!
