How do you configure a Permission Set so a user has read-only access to a specific IFS screen, able to search but not save or create new records, rather than full CRUD access?

All FAQ questions / Security and access

Answer

Create a dedicated Permission Set granting only Query access for that specific screen, and assign that permission set to the user. Critically, make sure none of the OTHER Permission Sets already assigned to that same user grant Full access to the same screen — when a user has multiple Permission Sets assigned, the framework applies the WIDEST privilege granted across all of them for a given screen, meaning even one other assigned Permission Set with Full access on that same screen would override the intended read-only restriction, regardless of how restrictively the dedicated query-only Permission Set is configured.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions