Field permissions decide which roles can see and change each field on each kind of record.
Where to set them
Go to Settings > Field Permissions and choose a record type. For each field, set what each role can do:
- Read and write: full access, which is the default.
- Read only: visible, but not editable.
- Hidden: left out of forms, lists, exports, and reports for that role. An export run by someone without access simply has no such column.
Common patterns
- Hide a gift capacity note from everyone outside fundraising.
- Hide annual revenue from everyone outside sales.
- Make lifecycle stage read-only for Sales Representatives, so only Sales Managers can change it.
- Hide board notes from every role except administrators.
A hidden field stays hidden everywhere: bulk changes skip it, and so do exports and reports.
Who changed what
Every change to a field permission is written to the audit trail, so Settings > Audit Trail shows who changed which permission and when.
Restricting whole records
Field permissions control fields, not records. To decide who can see a particular record, such as a confidential donor, use ownership and the roles you manage under Settings > Users & Teams.