Field-level security in report columns
Key Takeaway
To make sure a user can't access a field in a report, use field-level security (FLS), not a page layout. FLS decides which fields a user can see, and sharing settings decide which records.
Field-level security (FLS), also called field permissions, controls whether a user can view or edit each field on an object. FLS applies everywhere in the app, including reports. FLS lets you protect a sensitive field, such as salary, without hiding the whole object.
Where you set FLS and its access levels
You set FLS in profiles, permission sets and permission set groups. Salesforce recommends managing permissions with permission sets and permission set groups, because these reusable building blocks save you from creating dozens of profiles.
FLS has three access levels, but the labels depend on the interface:
| Interface | Labels for the three access levels |
|---|---|
| Permission sets and the enhanced profile user interface | Read and Edit, Read, None |
| Original profile and field-level security interfaces | Visible, Visible and Read-Only, None |
"None" means the user can't read or edit the field.