Get the latest perspectives on Microsoft Dynamics ERP software selection process from industry experts.

Filter Security in Business Central: Control Who Sees Which Records

Visit Website View Our Posts

Updated · Originally published

Filter security in Business Central limits which records a user can see or edit, instead of giving access to the whole table. With 2-Controlware's Field Security app you link a filter to permission sets, so a salesperson sees only their own region's vendors, or can only change the records that belong to their team.

Illustration of a filter showing only permitted records while other records stay hidden

Two of 2-Controlware's compliance apps for Business Central, Field Security and Field Validation, focus on control over your data. In this article, we look at the visibility side of the Field Security app's Filter Security feature.

What is filter security in Business Central?

Filter Security provides the capability to precisely control which data users can access. You link each filter to permission sets, so it applies to every user who has one of those sets. The primary function of these filters is to restrict users from using other data from the table. While its operation resembles standard Business Central filtering, the Field Security app adds a layer of protection: users cannot remove these filters themselves.

Filter Security allows for two distinct filtering approaches: visible and editable.

  • A visible filter ensures that users can only view records that fall within the specified filter criteria.
  • An editable filter permits users to see all records, but they can only create, modify, or delete records that match the filter's criteria.

Practical example:

Let's say a company wants its sales department employees to only modify vendors located in the "YELLOW" region.

  • Editable Filter: If a filter protection is configured for editability, sales users will be able to alter only those suppliers with the location code "YELLOW."
  • Visibility Filter: If a filter protection is set up based on visibility, users will exclusively see suppliers with the location code "YELLOW" when viewing lists.

Filter Security error message in Business Central blocking a change to a vendor outside location code YELLOW

When do you use these principles?

Both the editable and visibility principles offer significant benefits within an organization. Teams can effectively deploy the editability principle when users need to view data in documents, like purchase or sales orders, but must be prevented from making changes. The visibility principle particularly suits managing sensitive information, especially for GDPR/AVG compliance. This includes confidential data in customer files, supplier details, or other sensitive records.

Do you have any questions, or would you like to learn more about how this app can support your organisation? Please feel free to contact us or schedule a demo below. Together, we'll help you get your authorizations under control.

Frequently asked questions

What does Field Security add beyond standard Business Central permissions?

It adds control below table level. You can lock fields, limit which records a user sees or edits with Filter Security, and block single actions.

Does a visible filter also hide records in reports?

No. A visible filter hides records on the pages the app supports. Reports, queries and API pages still show all records, so plan those separately. An editable filter is checked on every save.

Is this the same as field validation?

No. Field security controls who can see or change a field. Field validation controls whether the data entered in a field meets a rule.

Where can I learn more?

See the Field Security product page.

Book a demo

Contact 2-Controlware at [email protected] or +31 76 501 94 70.

By 2-Controlware, Security and control of your Microsoft Dynamics environment, www.2-controlware.com

Field Security logo

Leave a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.