General
The Restricted Fields feature allows admin users to control individual users’ access to specific data. Currently, the feature is available only in the Contacts module and cannot be used in other modules. Access to restricted data is defined on a per-user basis.
Restricted Fields make it possible, for example, to hide information subject to a confidentiality or protection request from everyone except those users who have been granted permission to view it. A user may have permission to access a contact’s record but not the data contained in the restricted fields. Permissions related to restricted fields are always based on separately granted viewing and editing rights, which are managed in the system settings.
Getting Started
Restrictions are configured in the Settings → System Settings → Restricted Fields view. Before enabling the feature, it is recommended to decide which blocks within the Contacts module should be set as restricted — for example, contact or address information.
Field-level restrictions are not defined in this view; all settings are made at the block level.
When enabling the feature, first select the user for whom the permissions will be defined.
Permissions can be set per user and per block to determine which restricted fields they can access. Visibility to restricted fields can only be granted for those contacts that the user already has access to.
Usage
Permissions are assigned per user, so the feature is enabled by first selecting Add User.
Then, through the Edit button, the following permissions can be granted to each user:
View fields – the user can see information in the selected fields within the restricted blocks.
Edit restricted fields – the user can create, edit, or delete restricted data.
Remove restricted field functionality from the entity – the user is granted the right to remove the restriction feature entirely from the Contacts module.
Once the required permissions have been selected and the changes saved, the settings take effect immediately.